Re: Oracle OpenLDAP PPolicy ppolicy and the hierarchy

Am Mon, 23 Dec 2013 18:16:29 +0000 schrieb David Barr David.Barr2@mclaneat.com:

[...]

dn: cn=Directory Administrators,dc=bozo_company,dc=com objectClass: top objectClass: groupOfUniqueNames cn: Directory Administrators uniqueMember: cn=clownadmin,ou=Special Users,dc=bozo_company,dc=com uniqueMember: cn=david.barr,ou=People,dc=bozo_company,dc=com

[...]

consider this as my private and personal crusade :-) You use attribute type uniqueMember without any additional UID in order to enforce uniqueness. The syntax of uniqueMember attribute type is Name and optional UID. But without any additional UID any sort of uniqueness cannot be provided. Just use member attribute type for group membership, unless you want to enforce a proper uniqueness.

-Dieter