Re: All entries belong to the top object class?

On Mon, Apr 20, 2015 at 11:06:07AM +0530, dE wrote:

I'm concerned about the attributes. Does adding of the top object class (or person) add all attributes to the entry?

No. 'top' is defined in RFC4512:

( 2.5.6.0 NAME 'top' ABSTRACT MUST objectClass )

so every entry MUST contain an objectclass attribute. It does not say anything about any other attributes.

In any case, objectclasses do not directly add attributes to entries. They do permit (MAY) or require (MUST) certain attributes. It is up to the user or application to supply values for MUST attributes and for any MAY attributes that you want to use. LDAP does not support 'present but empty' attributes, so there must be a non-null value in each MUST attribute.

Andrew