Howard Chu wrote:
Use the correct attributeType - "olcObjectClasses" - pay attention to what you're doing, this should have been obvious.
Don't use replace, that will delete all the values.
Yepp.
Use delete/add of the specific value.
I'd recommend to use a decent LDAP client. ;-) In this case web2ldap would generate a minimal change because 'olcObjectClasses' has an EQUALITY matching rule and more than 3 attribute values. Old values are explicitly deleted and only new values are added then.
The LDIF of the modification will be displayed for e.g. generating LDIF modification scripts in a test staging environment.
Ciao, Michael.