hi,
i have install OpenLdap in a UbuntuServer, in virtual with VirtualBox. Now i want to import in Eclipse via Ldap Browser one file LDIF.
I have a FQDN like this, ldap.***.***.com, and i add this in /etc/hosts this FQDN with a ip address 192.168.1.156, the ip is my Server.
Now the problem, when i try to import Ldif, i have the problem with auth, i know i must change something in a slapd config but what?
Am Thu, 22 Aug 2013 14:49:02 +0200 schrieb felas felas85@gmail.com:
hi,
i have install OpenLdap in a UbuntuServer, in virtual with VirtualBox. Now i want to import in Eclipse via Ldap Browser one file LDIF.
I have a FQDN like this, ldap.***.***.com, and i add this in /etc/hosts this FQDN with a ip address 192.168.1.156, the ip is my Server.
Now the problem, when i try to import Ldif, i have the problem with auth, i know i must change something in a slapd config but what?
access control, search filter, wrong search base? Have you tried to search manually? ldapsearch -x -H ldap://192.168.1.156 -b "your base" -s sub "*"
-Dieter
On 08/22/13 14:49 +0200, felas wrote:
i have install OpenLdap in a UbuntuServer, in virtual with VirtualBox. Now i want to import in Eclipse via Ldap Browser one file LDIF.
I have a FQDN like this, ldap.***.***.com, and i add this in /etc/hosts this FQDN with a ip address 192.168.1.156, the ip is my Server.
Is this relevant? Does the import work without this change?
Now the problem, when i try to import Ldif, i have the problem with auth, i know i must change something in a slapd config but what?
In general, for importing ldif files, you may wish to use your configured rootdn/rootpw credentials, although that is not required. See Chapter 8 of the Administrator's Guide on the website for a discussion of Access Control.
Run 'slapcat -n0' to view your existing configuration, and reference the slapd-config manpage to interpret that data (or see the slapd.conf manpage if applicable).
thanks!, i re configure my slapd, i no touch the /etc/hosts file, and qhen i open Eclipse and LDAP Browser the connection is ok and the authentication too, but now when i try to import this file LDIF my error is: No such object...help please..
2013/8/22 Dan White dwhite@olp.net
On 08/22/13 14:49 +0200, felas wrote:
i have install OpenLdap in a UbuntuServer, in virtual with VirtualBox. Now i want to import in Eclipse via Ldap Browser one file LDIF.
I have a FQDN like this, ldap.***.***.com, and i add this in /etc/hosts this FQDN with a ip address 192.168.1.156, the ip is my Server.
Is this relevant? Does the import work without this change?
Now the problem, when i try to import Ldif, i have the problem with auth,
i know i must change something in a slapd config but what?
In general, for importing ldif files, you may wish to use your configured rootdn/rootpw credentials, although that is not required. See Chapter 8 of the Administrator's Guide on the website for a discussion of Access Control.
Run 'slapcat -n0' to view your existing configuration, and reference the slapd-config manpage to interpret that data (or see the slapd.conf manpage if applicable).
-- Dan White
2013/8/22 Dan White dwhite@olp.net
On 08/22/13 14:49 +0200, felas wrote:
i have install OpenLdap in a UbuntuServer, in virtual with VirtualBox. Now i want to import in Eclipse via Ldap Browser one file LDIF.
I have a FQDN like this, ldap.***.***.com, and i add this in /etc/hosts this FQDN with a ip address 192.168.1.156, the ip is my Server.
Is this relevant? Does the import work without this change?
Now the problem, when i try to import Ldif, i have the problem with auth, i know i must change something in a slapd config but what?
In general, for importing ldif files, you may wish to use your configured rootdn/rootpw credentials, although that is not required. See Chapter 8 of the Administrator's Guide on the website for a discussion of Access Control.
On 08/22/13 16:42 +0200, felas wrote:
thanks!, i re configure my slapd, i no touch the /etc/hosts file, and qhen i open Eclipse and LDAP Browser the connection is ok and the authentication too, but now when i try to import this file LDIF my error is: No such object...help please..
I an unable to come up with a theory as to how the /etc/hosts modification is causing the "No such object" error.
I believe the devil is in the details here - that is, you likely have bad data in your ldif file. Double check your ldif file carefully.
Provide additional details if you believe otherwise. See:
http://www.chiark.greenend.org.uk/~sgtatham/bugs.html
hi, my ldif file start with:
dn: ou=student,ou=people,dc=university,dc=org objectClass: organizationalUnit ou: student userPassword:: e01ENX1renFqNTdyF4M1V1M2RWxVeEY4S3VRoo0=
my localserver ldap.conf is:
BASE dc=university,dc=org URI ldap://192.168.1.2
you need a cn=config ? or a olcDatabase{1}hdb.ldif ?
2013/8/22 Dan White dwhite@olp.net
2013/8/22 Dan White dwhite@olp.net
On 08/22/13 14:49 +0200, felas wrote:
i have install OpenLdap in a UbuntuServer, in virtual with VirtualBox. Now i want to import in Eclipse via Ldap Browser one file LDIF.
I have a FQDN like this, ldap.***.***.com, and i add this in /etc/hosts this FQDN with a ip address 192.168.1.156, the ip is my Server.
Is this relevant? Does the import work without this change?
Now the problem, when i try to import Ldif, i have the problem with
auth, i know i must change something in a slapd config but what?
In general, for importing ldif files, you may wish to use your configured rootdn/rootpw credentials, although that is not required. See Chapter 8 of the Administrator's Guide on the website for a discussion of Access Control.
On 08/22/13 16:42 +0200, felas wrote:
thanks!, i re configure my slapd, i no touch the /etc/hosts file, and qhen i open Eclipse and LDAP Browser the connection is ok and the authentication too, but now when i try to import this file LDIF my error is: No such object...help please..
I an unable to come up with a theory as to how the /etc/hosts modification is causing the "No such object" error.
I believe the devil is in the details here - that is, you likely have bad data in your ldif file. Double check your ldif file carefully.
Provide additional details if you believe otherwise. See:
http://www.chiark.greenend.**org.uk/~sgtatham/bugs.htmlhttp://www.chiark.greenend.org.uk/~sgtatham/bugs.html
-- Dan White
2013/8/22 Dan White dwhite@olp.net
I an unable to come up with a theory as to how the /etc/hosts modification is causing the "No such object" error.
I believe the devil is in the details here - that is, you likely have bad data in your ldif file. Double check your ldif file carefully.
On 08/22/13 17:06 +0200, felas wrote:
hi, my ldif file start with:
dn: ou=student,ou=people,dc=university,dc=org objectClass: organizationalUnit ou: student userPassword:: e01ENX1renFqNTdyF4M1V1M2RWxVeEY4S3VRoo0=
This isn't a typical way to support authentication, but OU does appear to allow userPassword, according to core.ldif. So this looks valid.
Does ou=people,dc=university,dc=org exist?
Try increasing logging output on your server to get additional details on the error provided to your client.
my localserver ldap.conf is:
BASE dc=university,dc=org URI ldap://192.168.1.2
you need a cn=config ? or a olcDatabase{1}hdb.ldif ?
Sorry i move first step in openlad, so, the all output in my Eclipse is in attachment. what do you mean Does ou=people,dc=university,dc=org exist? , you mean in the server configuration?
2013/8/22 Dan White dwhite@olp.net
2013/8/22 Dan White dwhite@olp.net
I an unable to come up with a theory as to how the /etc/hosts modification is causing the "No such object" error.
I believe the devil is in the details here - that is, you likely have bad data in your ldif file. Double check your ldif file carefully.
On 08/22/13 17:06 +0200, felas wrote:
hi, my ldif file start with:
dn: ou=student,ou=people,dc=**university,dc=org objectClass: organizationalUnit ou: student userPassword:: e01ENX1renFqNTdyF4M1V1M2RWxVeE**Y4S3VRoo0=
This isn't a typical way to support authentication, but OU does appear to allow userPassword, according to core.ldif. So this looks valid.
Does ou=people,dc=university,dc=org exist?
Try increasing logging output on your server to get additional details on the error provided to your client.
my localserver ldap.conf is:
BASE dc=university,dc=org URI ldap://192.168.1.2
you need a cn=config ? or a olcDatabase{1}hdb.ldif ?
-- Dan White
Sorry i move first step in openlad, so, the all output in my Eclipse is in attachment. what do you mean Does ou=people,dc=university,dc=org exist? , you mean in the server configuration?
If you want to store ou=student,ou=people,dc=university,dc=org then the object with DN ou=people,dc=university,dc=org must already exist in your directory.
Chris
On 08/22/13 17:32 +0200, felas wrote:
Sorry i move first step in openlad, so, the all output in my Eclipse is in attachment. what do you mean Does ou=people,dc=university,dc=org exist? , you mean in the server configuration?
Presumably you, or your installation script, configured a database at dc=university,dc=org. See chapter 10 of the Admin guide.
Everything stored locally, underneath dc=university,dc=org will be written to disk (outside of your configuration), such as in /var/lib/ldap, depending on how the dc=university,dc=org database was configured. You may be able to view the existing data in the database with:
slapcat -n1
where "1" is the database number configured. See the slapcat man page.
Data underneath dc=university,dc=org will need to be created hierarchically. Before:
dn: ou=student,ou=people,dc=university,dc=org
can exist:
ou=people,dc=university,dc=org
must first be created. If that's your problem, add it to the top of your ldif file.
If i try slapcat -n1 i have result in a email attachment "slapcat", and if i add on the top the file LDIF ou=people,dc=university,dc=org, the error is LDAP: error code 17 - dn: attribute type undefined, for details i add a email attachment "error"
2013/8/22 Dan White dwhite@olp.net
On 08/22/13 17:32 +0200, felas wrote:
Sorry i move first step in openlad, so, the all output in my Eclipse is in attachment. what do you mean Does ou=people,dc=university,dc=org exist? , you mean in the server configuration?
Presumably you, or your installation script, configured a database at dc=university,dc=org. See chapter 10 of the Admin guide.
Everything stored locally, underneath dc=university,dc=org will be written to disk (outside of your configuration), such as in /var/lib/ldap, depending on how the dc=university,dc=org database was configured. You may be able to view the existing data in the database with:
slapcat -n1
where "1" is the database number configured. See the slapcat man page.
Data underneath dc=university,dc=org will need to be created hierarchically. Before:
dn: ou=student,ou=people,dc=**university,dc=org
can exist:
ou=people,dc=university,dc=org
must first be created. If that's your problem, add it to the top of your ldif file.
-- Dan White
________________________________
Date: Fri, 23 Aug 2013 10:02:39 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.com To: dwhite@olp.net CC: openldap-technical@openldap.org
If i try slapcat -n1 i have result in a email attachment "slapcat", and if i add on the top the file LDIF ou=people,dc=university,dc=org, the error is LDAP: error code 17 - dn: attribute type undefined, for details i add a email attachment "error"
Can you show us the LDIF file you are trying to import? (suitably anonymised of course)
Chris
i create a (example) Ldif in email attachment, thanks. The file is withoout add " ou=people,dc=university,dc=org" in the top
2013/8/23 Chris Card ctcard@hotmail.com
Date: Fri, 23 Aug 2013 10:02:39 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.com To: dwhite@olp.net CC: openldap-technical@openldap.org
If i try slapcat -n1 i have result in a email attachment "slapcat", and if i add on the top the file LDIF ou=people,dc=university,dc=org, the error is LDAP: error code 17 - dn: attribute type undefined, for details i add a email attachment "error"
Can you show us the LDIF file you are trying to import? (suitably anonymised of course)
Chris
________________________________
Date: Fri, 23 Aug 2013 11:01:52 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.com To: ctcard@hotmail.com CC: openldap-technical@openldap.org
i create a (example) Ldif in email attachment, thanks. The file is withoout add " ou=people,dc=university,dc=org" in the top
sorry, I meant the LDIF *with* ou=people,dc=university,dc=org
2013/8/23 Chris Card <ctcard@hotmail.commailto:ctcard@hotmail.com> ________________________________
Date: Fri, 23 Aug 2013 10:02:39 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.commailto:felas85@gmail.com To: dwhite@olp.netmailto:dwhite@olp.net CC: openldap-technical@openldap.orgmailto:openldap-technical@openldap.org
If i try slapcat -n1 i have result in a email attachment "slapcat", and if i add on the top the file LDIF ou=people,dc=university,dc=org, the error is LDAP: error code 17 - dn: attribute type undefined, for details i add a email attachment "error"
Can you show us the LDIF file you are trying to import? (suitably anonymised of course)
Chris
A ok. if you want i can post the log file from my Eclipse too.
2013/8/23 Chris Card ctcard@hotmail.com
Date: Fri, 23 Aug 2013 11:01:52 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.com To: ctcard@hotmail.com CC: openldap-technical@openldap.org
i create a (example) Ldif in email attachment, thanks. The file is withoout add " ou=people,dc=university,dc=org" in the top
sorry, I meant the LDIF *with* ou=people,dc=university,dc=org
2013/8/23 Chris Card <ctcard@hotmail.commailto:ctcard@hotmail.com> ________________________________
Date: Fri, 23 Aug 2013 10:02:39 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.commailto:felas85@gmail.com To: dwhite@olp.netmailto:dwhite@olp.net CC: openldap-technical@openldap.org<mailto:
openldap-technical@openldap.org>
If i try slapcat -n1 i have result in a email attachment "slapcat", and if i add on the top the file LDIF ou=people,dc=university,dc=org, the error is LDAP: error code 17 - dn: attribute type undefined, for details i add a email attachment "error"
Can you show us the LDIF file you are trying to import? (suitably anonymised of course)
Chris
________________________________
Date: Fri, 23 Aug 2013 11:01:52 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.com To: ctcard@hotmail.com CC: openldap-technical@openldap.org
i create a (example) Ldif in email attachment, thanks. The file is withoout add " ou=people,dc=university,dc=org" in the top
Try removing the version: 1 line from the top of the file
2013/8/23 Chris Card <ctcard@hotmail.commailto:ctcard@hotmail.com> ________________________________
Date: Fri, 23 Aug 2013 10:02:39 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.commailto:felas85@gmail.com To: dwhite@olp.netmailto:dwhite@olp.net CC: openldap-technical@openldap.orgmailto:openldap-technical@openldap.org
If i try slapcat -n1 i have result in a email attachment "slapcat", and if i add on the top the file LDIF ou=people,dc=university,dc=org, the error is LDAP: error code 17 - dn: attribute type undefined, for details i add a email attachment "error"
Can you show us the LDIF file you are trying to import? (suitably anonymised of course)
Chris
I try to remove and i post you the log file
2013/8/23 Chris Card ctcard@hotmail.com
Date: Fri, 23 Aug 2013 11:01:52 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.com To: ctcard@hotmail.com CC: openldap-technical@openldap.org
i create a (example) Ldif in email attachment, thanks. The file is withoout add " ou=people,dc=university,dc=org" in the top
Try removing the version: 1 line from the top of the file
2013/8/23 Chris Card <ctcard@hotmail.commailto:ctcard@hotmail.com> ________________________________
Date: Fri, 23 Aug 2013 10:02:39 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.commailto:felas85@gmail.com To: dwhite@olp.netmailto:dwhite@olp.net CC: openldap-technical@openldap.org<mailto:
openldap-technical@openldap.org>
If i try slapcat -n1 i have result in a email attachment "slapcat", and if i add on the top the file LDIF ou=people,dc=university,dc=org, the error is LDAP: error code 17 - dn: attribute type undefined, for details i add a email attachment "error"
Can you show us the LDIF file you are trying to import? (suitably anonymised of course)
Chris
________________________________
Date: Fri, 23 Aug 2013 11:25:29 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.com To: ctcard@hotmail.com CC: openldap-technical@openldap.org
I try to remove and i post you the log file
#!RESULT ERROR #!CONNECTION ldap://192.168.1.156:389 #!DATE 2013-08-23T11:24:21.980 #!ERROR [LDAP: error code 21 - objectClass: value #0 invalid per syntax] dn: cn=Mailadmin,ou=student,ou=people,dc=university,dc=org objectClass: mmXinec cn: Mailadmin givenName: Mail System Administrator sn: Mailadmin uid: mailadmin userPassword::
Most likely, the objectclass mmXinec is not defined in your schema
2013/8/23 Chris Card <ctcard@hotmail.commailto:ctcard@hotmail.com> ________________________________
Date: Fri, 23 Aug 2013 11:01:52 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.commailto:felas85@gmail.com To: ctcard@hotmail.commailto:ctcard@hotmail.com CC: openldap-technical@openldap.orgmailto:openldap-technical@openldap.org
i create a (example) Ldif in email attachment, thanks. The file is withoout add " ou=people,dc=university,dc=org" in the top
Try removing the version: 1 line from the top of the file
2013/8/23 Chris Card
<ctcard@hotmail.commailto:ctcard@hotmail.com<mailto:ctcard@hotmail.commailto:ctcard@hotmail.com>>
Date: Fri, 23 Aug 2013 10:02:39 +0200 Subject: Re: Openldap configuration import LDIF From:
felas85@gmail.commailto:felas85@gmail.com<mailto:felas85@gmail.commailto:felas85@gmail.com>
To:
dwhite@olp.netmailto:dwhite@olp.net<mailto:dwhite@olp.netmailto:dwhite@olp.net>
CC:
openldap-technical@openldap.orgmailto:openldap-technical@openldap.org<mailto:openldap-technical@openldap.orgmailto:openldap-technical@openldap.org>
If i try slapcat -n1 i have result in a email attachment "slapcat", and if i add on the top the file LDIF ou=people,dc=university,dc=org, the error is LDAP: error code 17 - dn: attribute type undefined, for details i add a email attachment "error"
Can you show us the LDIF file you are trying to import? (suitably anonymised of course)
Chris
a ok, and how i can define this in my schema?
2013/8/23 Chris Card ctcard@hotmail.com
Date: Fri, 23 Aug 2013 11:25:29 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.com To: ctcard@hotmail.com CC: openldap-technical@openldap.org
I try to remove and i post you the log file
#!RESULT ERROR #!CONNECTION ldap://192.168.1.156:389 #!DATE 2013-08-23T11:24:21.980 #!ERROR [LDAP: error code 21 - objectClass: value #0 invalid per syntax] dn: cn=Mailadmin,ou=student,ou=people,dc=university,dc=org objectClass: mmXinec cn: Mailadmin givenName: Mail System Administrator sn: Mailadmin uid: mailadmin userPassword::
Most likely, the objectclass mmXinec is not defined in your schema
2013/8/23 Chris Card <ctcard@hotmail.commailto:ctcard@hotmail.com> ________________________________
Date: Fri, 23 Aug 2013 11:01:52 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.commailto:felas85@gmail.com To: ctcard@hotmail.commailto:ctcard@hotmail.com CC: openldap-technical@openldap.org<mailto:
openldap-technical@openldap.org>
i create a (example) Ldif in email attachment, thanks. The file is withoout add " ou=people,dc=university,dc=org" in the top
Try removing the version: 1 line from the top of the file
2013/8/23 Chris Card
<ctcard@hotmail.commailto:ctcard@hotmail.com<mailto:ctcard@hotmail.com
Date: Fri, 23 Aug 2013 10:02:39 +0200 Subject: Re: Openldap configuration import LDIF From:
felas85@gmail.commailto:felas85@gmail.com<mailto:felas85@gmail.com
To:
dwhite@olp.netmailto:dwhite@olp.net<mailto:dwhite@olp.net<mailto:
dwhite@olp.net>>
CC:
openldap-technical@openldap.org<mailto:openldap-technical@openldap.org <mailto:openldap-technical@openldap.org<mailto:
openldap-technical@openldap.org>>
If i try slapcat -n1 i have result in a email attachment "slapcat", and if i add on the top the file LDIF ou=people,dc=university,dc=org, the error is LDAP: error code 17 - dn: attribute type undefined, for details i add a email attachment "error"
Can you show us the LDIF file you are trying to import? (suitably anonymised of course)
Chris
________________________________
Date: Fri, 23 Aug 2013 11:58:52 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.com To: ctcard@hotmail.com CC: openldap-technical@openldap.org
a ok, and how i can define this in my schema?
openldap stores the schemas under cn=schema,cn=config and you can update them in the same way as any other LDAP data, using ldapmodify and suitable LDIF for example.
There comes a point where you have to start reading up and working things out for yourself, and this is probably it.
Chris
2013/8/23 Chris Card <ctcard@hotmail.commailto:ctcard@hotmail.com> ________________________________
Date: Fri, 23 Aug 2013 11:25:29 +0200 Subject: Re: Openldap configuration import LDIF From: felas85@gmail.commailto:felas85@gmail.com To: ctcard@hotmail.commailto:ctcard@hotmail.com CC: openldap-technical@openldap.orgmailto:openldap-technical@openldap.org
I try to remove and i post you the log file
#!RESULT ERROR #!CONNECTION ldap://192.168.1.156:389http://192.168.1.156:389 #!DATE 2013-08-23T11:24:21.980 #!ERROR [LDAP: error code 21 - objectClass: value #0 invalid per syntax] dn: cn=Mailadmin,ou=student,ou=people,dc=university,dc=org objectClass: mmXinec cn: Mailadmin givenName: Mail System Administrator sn: Mailadmin uid: mailadmin userPassword::
Most likely, the objectclass mmXinec is not defined in your schema
felas schrieb (23.08.2013 11:58 Uhr):
a ok, and how i can define this in my schema?
the better question might be: why do you need objectClass: mmXinec or where is it from.
2013/8/23 Chris Card <ctcard@hotmail.com mailto:ctcard@hotmail.com>
________________________________ > Date: Fri, 23 Aug 2013 11:25:29 +0200 > Subject: Re: Openldap configuration import LDIF > From: felas85@gmail.com <mailto:felas85@gmail.com> > To: ctcard@hotmail.com <mailto:ctcard@hotmail.com> > CC: openldap-technical@openldap.org <mailto:openldap-technical@openldap.org> > > I try to remove and i post you the log file #!RESULT ERROR #!CONNECTION ldap://192.168.1.156:389 <http://192.168.1.156:389> #!DATE 2013-08-23T11:24:21.980 #!ERROR [LDAP: error code 21 - objectClass: value #0 invalid per syntax] dn: cn=Mailadmin,ou=student,ou=people,dc=university,dc=org objectClass: mmXinec cn: Mailadmin givenName: Mail System Administrator sn: Mailadmin uid: mailadmin userPassword::
try to build your objects from standard ldap object included in openldap schemas (like inetorgperson or posixaccount), if there are no other circumstances forcing you into something like "mmXinec".
Marc
Hi i solved the problem, i modified the file nis.ldif, with objectClass and Attribute that i need. For now i delete the mmXinec.Thanks!
2013/8/26 Marc Patermann hans.moser@ofd-z.niedersachsen.de
felas schrieb (23.08.2013 11:58 Uhr):
a ok, and how i can define this in my schema?
the better question might be: why do you need objectClass: mmXinec or where is it from.
2013/8/23 Chris Card <ctcard@hotmail.com mailto:ctcard@hotmail.com>
______________________________**__ > Date: Fri, 23 Aug 2013 11:25:29 +0200 > Subject: Re: Openldap configuration import LDIF > From: felas85@gmail.com <mailto:felas85@gmail.com> > To: ctcard@hotmail.com <mailto:ctcard@hotmail.com> > CC: openldap-technical@openldap.**org<openldap-technical@openldap.org> <mailto:openldap-technical@**openldap.org<openldap-technical@openldap.org>
> > I try to remove and i post you the log file #!RESULT ERROR #!CONNECTION ldap://192.168.1.156:389 <http://192.168.1.156:389> #!DATE 2013-08-23T11:24:21.980 #!ERROR [LDAP: error code 21 - objectClass: value #0 invalid per
syntax] dn: cn=Mailadmin,ou=student,ou=**people,dc=university,dc=org objectClass: mmXinec cn: Mailadmin givenName: Mail System Administrator sn: Mailadmin uid: mailadmin userPassword::
try to build your objects from standard ldap object included in openldap schemas (like inetorgperson or posixaccount), if there are no other circumstances forcing you into something like "mmXinec".
Marc
openldap-technical@openldap.org