On Wed, Mar 6, 2013 at 5:52 PM, Maria McKinley <span dir="ltr">&lt;<a href="mailto:mariak@mariakathryn.net" target="_blank">mariak@mariakathryn.net</a>&gt;</span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi there, <div><br></div><div>I recently changed from the slapd.conf configuration to the slapd.d configuration. Everything seemed to go reasonably well, but for some reason the shadowLastChange attribute was missing from all of the people. When I try to add it back in, I get: </div>

<div><br></div><div>ldap_add: Object class violation (65) additional info: no objectClass attribute<div><br></div></div><div>but, I seem to have the schema and objectClasses for ShadowLastChange:</div><div><br></div><div>

<div>annette:~# ldapsearch -LLLQY EXTERNAL -H ldapi:/// -b cn=schema,cn=config &quot;(objectClass=olcSchemaConfig)&quot; dn</div><div>dn: cn=schema,cn=config</div><div><br></div><div>dn: cn={0}core,cn=schema,cn=config</div>

<div><br></div><div>dn: cn={1}cosine,cn=schema,cn=config</div><div><br></div><div>dn: cn={2}nis,cn=schema,cn=config</div><div><br></div><div>dn: cn={3}inetorgperson,cn=schema,cn=config</div><div><br></div><div>dn: cn={4}misc,cn=schema,cn=config</div>

</div><div><br></div><div><div>maria@mimi:~/sysadmin$ ldapsearch -xLLL &quot;uid=jd&quot;</div><div>dn: uid=jd,ou=people,dc=example,dc=com</div><div>objectClass: top</div><div>objectClass: posixAccount</div><div>objectClass: shadowAccount</div>

<div>objectClass: person</div><div>objectClass: organizationalPerson</div><div>objectClass: inetOrgPerson</div><div>objectClass: inetLocalMailRecipient</div><div>cn: Jochen Ditterich</div><div>shadowMax: 365</div><div>gidNumber: 100</div>

<div>uid: jd</div><div>homeDirectory: /home/jd</div><div>mailRoutingAddress: <a href="mailto:jd@example.com" target="_blank">jd@example.com</a></div><div>uidNumber: 1025</div><div>sn: Ditterich</div><div>shadowWarning: 7</div>
<div>mailLocalAddress: jd</div>
<div>mail: <a href="mailto:jd@example.com" target="_blank">jd@example.com</a></div><div>loginShell: /bin/bash</div></div><div><br></div><div>Anyone have any idea what might be going on? What am I missing?</div><div><br></div>
<div>thanks,</div>
<div>maria</div>
</blockquote></div><br>So, I got past that error message (had an error in my change file), but now things are even stranger. When I got it right, I got the following message:<div><br></div><div><div>add shadowLastChange:</div>
<div>        15771</div><div>modifying entry &quot;uid=jd,ou=people,dc=example,dc=com&quot;</div><div>ldap_modify: Constraint violation (19)</div><div>        additional info: attribute &#39;shadowLastChange&#39; cannot have multiple values</div>
</div><div><br></div><div>That&#39;s strange. So, maybe it thinks it already has that attribute. let&#39;s see what happens if we try to modify it instead of add it:</div><div><br></div><div><div>replace shadowLastChange:</div>
<div>        15771</div><div>modifying entry &quot;uid=jd,ou=people,dc=example,dc=com&quot;</div><div>modify complete</div></div><div><br></div><div>Huh, well that seemed to have worked. Let&#39;s see what the value is now.</div>
<div><br></div><div><div>annette:~# ldapsearch -x &quot;uid=jd&quot; shadowLastChange</div><div># extended LDIF</div><div>#</div><div># LDAPv3</div><div># base &lt;dc=example,dc=com&gt; (default) with scope subtree</div><div>
# filter: uid=jd</div><div># requesting: shadowLastChange </div><div>#</div><div><br></div><div># jd, people, <a href="http://example.com">example.com</a></div><div>dn: uid=jd,ou=people,dc=example,dc=com</div><div><br></div>
<div># search result</div><div>search: 2</div><div>result: 0 Success</div><div><br></div><div># numResponses: 2</div><div># numEntries: 1</div></div><div><br></div><div>Um, so where is it? Help!</div><div><br></div><div>thanks,</div>
<div>maria</div>