Alexander Hartner wrote:
On 21 Feb 2008, at 11:56, Alexander Hartner wrote:
I am trying to import a simple LDIF file into OpenDirectory on OS X 10.5.2 Leopard Server.
However when I issue the following ldapadd command I get an error :
ldapadd -D [rootdn] -x -w [secretPassword] -f Import.ldif
Error : 65 Object class violation" attribute 'apple-generateduid' not allowed
At it turns out the problem was with the objectClasses.
Yes.
I should have used :
* objectClass: top * objectClass: person * objectClass: organizationalPerson * objectClass: inetOrgPerson * objectClass: extensibleObject
No!
Adding extensibleObject almost disables schema checking for that entry. This is only appropriate in very special cases but in general is bad practice. E.g. a schema-aware client does not have any chance to display an appropriate input form based on schema information. And likely Apple LDAP clients will search for entries of a particular object class and might ignore your entries.
You should rather search for the right schema file and import that. A quick search turned up:
http://mattfleming.com/files/active/0/apple.schema
So the right solution is to add object class 'apple-user'.
Ciao, Michael.