You have to first start by defining your new schema. Here's an example
below for your 2 attributes, and an auxiliary object class (i.e. a class
that can be added to any kind of entry, in addition to their existing
object classes) allowing the use of these attributes. The birthday needs to
be expressed in a format restricted from ISO8601. For example, if the
birthday is 1st Feb of 1950 at 13:35:56 UTC, you can express it as
19500201133556Z; you can omit the seconds and minutes, but not the hour,
and not the timezone.
olcAttributeTypes: ( 126.96.36.199.4.1.myoid.1.1 NAME 'birthday'
SYNTAX 188.8.131.52.4.1.14184.108.40.206.24 SINGLE-VALUE )
olcAttributeTypes: ( 220.127.116.11.4.1.myoid.1.2 NAME 'maidenName'
DESC 'Maiden name'
SYNTAX 18.104.22.168.4.1.1422.214.171.124.15 SINGLE-VALUE )
olcObjectClasses: ( 126.96.36.199.4.1.myoid.2.1 NAME 'MorePersonalInformation'
SUP top AUXILIARY
DESC 'More personal information that can be added to a person'
MAY ( birthday $ maidenName ) )
Allocate an OID for you, adapt the OIDs present in the schema (I've used
myoid.1 for attributes and myoid.2 for object classes, and add another arc
for each attribute/class.
Declare this schema in your LDAP server, and for each entry in your DIT,
you can add the "MorePersonalInformation" object class to this entry, and
add the 2 new attributes.
Later on, you'll be able to search for entries according to their birthday
(for example, list users for which the birthday falls within the next
Le lun. 16 déc. 2019 à 19:18, SHarbich(a)t-online.de <SHarbich(a)t-online.de> a
I use OpenLDAP Versin 2.4.47. So far I haven't found anything on Goggle to
add the birthday or place of birth as an attraction. All instructions do
not work. I couldn't find an individual scheme either. Where can I still
Here is a guide that did not work for me:
Have you ever added attributes and instructions for me?
Greetings from Stefan Harbich
Betreff: Re: birthday and maiden name are not in the standard schema
Von: "Michael Ströder" <michael(a)stroeder.com>
An: "SHarbich(a)t-online.de" <SHarbich(a)t-online.de>, "
On 12/14/19 1:47 PM, SHarbich(a)t-online.de wrote:
> i need support if I want to add two attributes to my LDAP schema.
Yeah, known deficiency of RFC 2798.
Many people invented their own schema to work around this.