Hi Simone,

It is not that hard to add a new schema. (for me it’s harder to modify the unique overlays… ;-))

Step by step:

1. Backup the Database

a. ldapsearch -h $host -b $ldaproot -D $admin -w $pswd > $outfile

2. Remove the Database

a. ldapdelete -h $host -x -r -D $admin -w $pswd $ldaproot

3. Remove the Access Rules (save it bevore)

a. ldapmodify -w $pswd -D $backendadmin -h $host -f ./remolcAccess.ldif

4. shut down the Server

a. sudo pkill slapd

5. remove the old schema from “/etc/ldap/schema/" (It is a Ubuntu Server)

a. sudo rm $directory$schema".schema"

6. copy the new schema to the dir (and modify it, if you created your schema with “Apache Directory Studio” Otherwise the file can’t be transferred to the server)

a. sed ':a;N;$!ba;s/\n)/)/g' $schema".schema" > /etc/ldap/schema/$schema.schema

7. Create a dir fort he new files

a. mkdir temp

8. Create the new ldif files fort he server (The config files contain the include paths for your and the standard files [include /etc/ldap/schema/core.schema \n include /etc/ldap/schema/$schema.schema])

a. slaptest -v -f $configfile -F temp

9. Then you need to change some lines in the file

a. gedit './temp/cn=config/cn=schema/cn={1}'$schema'.ldif'

b. change the dn and cn to

dn: cn=$schema,cn=schema,cn=config
cn: vfk

and remove the lines:

structuralObjectClass: olcSchemaConfig
entryUUID: 94e4e7d8-dac5-1034-91d7-377cd4dc2933
creatorsName: cn=config
createTimestamp: 20150819135440Z
entryCSN: 20150819135440.534766Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20150819135440Z

10. Backup the schemes

a. mkdir temp/backup
cp -R '/etc/ldap/slapd.d/cn=config/cn=schema/*' 'temp/backup'

11. remove the old schemes it is important to replace the X with the next number (You will see what I mean)

a. rm '/etc/ldap/slapd.d/cn=config/cn=schema/cn={X}vfk.ldif'

12. Start the server

a. sudo slapd

13. transfer the schema to the server

a. ldapadd -w $pswd -D $backendadmin -h $host -f 'temp/cn=config/cn=schema/cn={1}'$schema'.ldif' –v

14. transfer the olcAccess back to the server

a. ldapmodify -w $pswd -D $backendadmin -h $host -f ./accessINIT_orga.ldif

15. transfer the DB back to the server

a. ldapadd -D $admin -w $pswd -h $host -f ./$outfile

More infos here: http://www.zytrax.com/books/ldap/ch6/slapd-config.html

Please use this information to build up your own solution for the problem, all the written stuff could also be wrong, but it work for my testServer.

I hope this will help you

Greetings

JOhn

Von: openldap-technical [mailto:openldap-technical-bounces@openldap.org] Im Auftrag von Simone Taliercio
Gesendet: Mittwoch, 26. August 2015 13:36
An: openldap-technical@openldap.org
Betreff: Re: Mail attribute: how to make it mandatory.

2015-08-26 6:45 GMT+02:00 Fischer, Johannes <johannes.fischer@ipa.fraunhofer.de>:

One „quick“ fix could be to change the schema,

Or you can create a new schema which meet the requirement. (This is the better solution I think)

Greetings

John

Hi Johannes,

Thanks for the tips.

I thought those were the right solutions. But, in both cases I will need to start to learn from scratch how to do it.

Best,

Simone