ldap - How to extend inetOrgPerson object class in OpenLDAP with attributes used by an Active Directory user -
i have application works active directory , depends attributes on user objectclass. add schema use openldap can create use user accounts in openldap same code works active directory today. i've created following schema extends inetorgperson, in attempting validate , convert ldif file, slaptest responds
line 11 attributetype: syntax not found: "1.2.840.113556.1.4.906"
the problem line seems on large integer syntax used active directory. openldap includes integer syntax (1.3.6.1.4.1.1466.115.121.1.27), how define new syntax large integer?
attributetype ( 1.2.840.113556.1.4.750 name 'grouptype' syntax '1.3.6.1.4.1.1466.115.121.1.27' single-value ) attributetype ( 1.3.114.7.4.2.0.33 name 'memberof' syntax '1.3.6.1.4.1.1466.115.121.1.26' ) attributetype ( 1.2.840.113556.1.4.656 name 'userprincipalname' syntax '1.3.6.1.4.1.1466.115.121.1.15' ) attributetype ( 1.2.840.113556.1.4.52 name 'lastlogon' syntax '1.2.840.113556.1.4.906' ) attributetype ( 1.2.840.113556.1.4.159 name 'accountexpires' syntax '1.2.840.113556.1.4.906' ) attributetype ( 1.2.840.113556.1.4.96 name 'pwdlastset' syntax '1.2.840.113556.1.4.906' ) attributetype ( 1.2.840.113556.1.4.221 name 'samaccountname' syntax '1.3.6.1.4.1.1466.115.121.1.15' ) attributetype ( 1.2.840.113556.1.4.8 name 'useraccountcontrol' syntax '1.3.6.1.4.1.1466.115.121.1.27' ) attributetype ( 1.2.840.113556.1.4.90 name 'unicodepwd' syntax '1.3.6.1.4.1.1466.115.121.1.40' ) objectclass ( 1.2.840.113556.1.5.9 name 'user' desc 'a user' sup inetorgperson structural must ( cn ) may ( userpassword $ memberof $ userprincipalname $ distinguishedname $ lastlogon $ accountexpires $ pwdlastset $ samaccountname $ useraccountcontrol $ unicodepwd ) ) objectclass ( 1.2.840.113556.1.5.8 name 'group' desc 'a group of users' sup top structural must ( grouptype $ cn ) may ( member ) )
see this, ldap syntaxes supported
http://www.zytrax.com/books/ldap/apa/types.html#syntaxes
try: 1.3.6.1.4.1.1466.115.121.1.38
Comments
Post a Comment