I am building a new LDAP structure. I'd like to separate the LDIF-scripts for the creation of my structure from the scripts for the creation of my users. The structure will have to be applied on multiple servers (DTAP) but the users will only be used in unit-tests/development.
But when I create my group, Apache DS (only for development) tells me member
is a required attribute of groupOfNames
.
ERR_279 Required attributes [member(2.5.4.31)] not found within entry cn=USER_ROLE, ou=groups, dc=company, dc=com ]
More concrete; what I am looking to accomplish is the following LDIF.
### Create the group
dn: cn=USER_ROLE, ou=groups, dc=company, dc=com
objectClass: groupOfNames
objectClass: top
cn: USER_ROLE
# Not adding a member here
### Create the user
dn: uid=myUser, ou=accounts, dc=company, dc=com
objectClass: inetOrgPerson
objectClass: top
# More properties
### Add user to group
dn: cn=USER_ROLE, ou=groups, dc=company, dc=com
changetype: modify
add: member
member: uid=myUser, ou=accounts, dc=company, dc=com
I've tried adding an empty member:
to the initial creation of the group. Which works, but leaves an empty member and does not look like a clean solution.