Derek Chen-Becker wrote:
On 08/03/2011 01:10 PM, Michael Ströder wrote:
- Somewhat hackish: Define a DIT content rule for organizationalUnit and add
the needed attributes to MAY in this.
and 2. requires you to transform your data.
does not require data changes but some rather naive schema-aware LDAP
clients might refuse to handle the additional attributes.
The software that consumes this right now (postfix) seems blissfully ignorant of any schema since it handles our modified organizationalUnits just fine. If/when we get an opportunity to rewrite the software I'll definitely take a look at option #1, since that seems the cleanest, but for now where might I find more details on #3?
In your case:
dITContentRule ( 2.5.6.5 NAME 'organizationalUnit-dcr' MAY ( mail ) )
See RFC 4512 section 4.1.6. for details.
Ciao, Michael.