11:26 a.m.
Can I modify the 'top' objectClass in openLDAP to incorporate some activedirectory
attributes. Existing schemas in '/etc/ldap/slapd.d/cn=config/cn=schema' can be
modified using ldapmodify. But i cannot find 'top' objectClass in any of these. To
my knowledge, 'top' is part of system schema but can it be modified?
1:01 p.m.
--On Friday, September 25, 2020 12:26 AM +0500 Zahoor Alizai
<zahoor.alizai(a)inara.pk> wrote:
Can I modify the 'top' objectClass in openLDAP
No. The top objectClass is very specific and should never be modified.
If you want MS attributes in your server, you should either create your own
schema for the MS attributes or use the one in the OpenLDAP git repository
for master.
Regards,
Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
9:38 p.m.
Hi. Thanks for the answer.
I want to write my own schema and incorporate all of the MS attributes in my server. I
want to keep the names of object classes and attributes in my server same as they are in
AD. For that reason i wanted to modify "top" object class because there are
certain attributes which are must in AD's top object class and are not available by
default in OpenLDAP's top object class. For example in OpenLDAP attribute
"objectClass" is must in top but in AD's "top" objectClass there
are more than one "must" and "may" attributes. Is there any way that I
can modify "top" object class? And yes, this server will only be compatible with
AD. I won't be running any other schema on this server.
897
days inactive
919
days old
openldap-technical@openldap.org
3 comments
4 participants
participants (4)
-
Michael Ströder -
Quanah Gibson-Mount -
Zahoor Alizai -
zahoor.alizai＠inara.pk