Re: ldap

[Adam Tauno Williams <adam@xxxxxxxxxxxxxxxx>]

>Hi  LDAP users.
>What kind of schema's are you folks using?

Mostly the ones that come with OpenLDAP.  Are you using OpenLDAP 1.x or 2.x? 
The schema structures are quite diffrent.
 
>If I export my netscape to ldif it gives something like:
> ---------
> dn: cn=members@kalamazoolinux.org,mail=members@kalamazoolinux.org
> modifytimestamp: 20010417121410Z
> cn: members@kalamazoolinux.org
> mail: members@kalamazoolinux.org
> xmozillausehtmlmail: FALSE
> objectclass: top
> objectclass: person
> --------

Ew!  First you need to remove the "modifytimestamp" attributes.  Netscape should
not have outputted those by default as those are operational attributes
maintained by the server and cannot be modified by the user.
> 
> I can't get that into my LDAP database when "schemacheck is turned on. 
> See slapd.conf.

> After turning the schemacheck off all is imported but browsing it with
>gq the entries like "mail" are coloured red.

According to the core.schema objectclass person does not have an attrobute mail:


objectclass ( 2.5.6.7 NAME 'organizationalPerson' SUP person STRUCTURAL
        MAY ( title $ x121Address $ registeredAddress $ destinationIndicator $
                preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $
                telephoneNumber $ internationaliSDNNumber $
                facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $
                postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l ) )


You want to add "objectclass: inetorgperson" to each object (IMHO):

objectclass     ( 2.16.840.1.113730.3.2.2
    NAME 'inetOrgPerson'
        DESC 'RFC2798: Internet Organizational Person'
    SUP organizationalPerson
    STRUCTURAL
        MAY (
                audio $ businessCategory $ carLicense $ departmentNumber $
                displayName $ employeeNumber $ employeeType $ givenName $
                homePhone $ homePostalAddress $ initials $ jpegPhoto $
                labeledURI $ mail $ manager $ mobile $ o $ pager $
                photo $ roomNumber $ secretary $ uid $ userCertificate $
                x500uniqueIdentifier $ preferredLanguage $
                userSMIMECertificate $ userPKCS12 )
        )

which is defined in inetorgperson.schema.

I am assuming OpenLDAP 2.x

>I would like to create my database, not having to edit many entries or
>having to create my own schema's.

Avoid that at almost all costs.

>I use the following schema's at this moment:
>core.schema
>cosine.schema
>nis.schema


Systems and Network Administrator
Morrison Industries
1825 Monroe Ave NW.
Grand Rapids, MI. 49505