Mark Henning wrote:
I am in the process of building an LDAP schema which has a number of attributes which will be constrained to specific values. I have run into an issue where slaptest will build the ldif file without syntax errors, but when slapd starts up it can't find the X-ENUM syntax defined in the same file.
This X-ENUM stuff is probably a proprietary extension of another LDAP server implementation. With OpenLDAP you have to use slapo-constraint(5) for that.
So your example
ldapsyntax ( 1.3.6.1.4.1.39235.2.3.500 DESC 'Test Enumeration' X-ENUM ( 'Yes' 'No' 'Maybe' ) )
gets turned into an attribute constraint like this:
constraint_attribute 1.3.6.1.4.1.39235.2.3.500 regex "^(Yes|No|Maybe)$"
slapo-constraint is a bit more powerful and you can achieve things like dynamically searched enums or rules for composing attributes with set-based constraints. You should really carefully read slapo-constraint(5).
Ciao, Michael.