OK, so I am learning and configuring openLDAP for the first time based partly on this tutorial:
I am trying to add a sample user, but I think I noticed a type in the tutorial. In the example ldif the author used
cn: Christopher. I thought that cn should be a shorter name, similar to the uid if not exactly the same. So in my ldif I set both
gn (givenName), but I am getting an error about the givenName:
ldap_add: Object class violation (65) additional info: attribute 'givenName' not allowed
Here is my ldif:
dn: cn=tarcuri,ou=groups,dc=example,dc=com cn: jsmith gidNumber: 20000 objectClass: top objectClass: posixGroup dn: uid=tarcuri,ou=people,dc=example,dc=com uid: jsmith uidNumber: 20000 gidNumber: 20000 objectClass: top objectClass: person objectClass: posixAccount objectClass: shadowAccount cn: jsmith gn: John sn: Smith loginShell: /bin/bash homeDirectory: /home/jsmith userPassword: john
How would I modify my ldif file to correctly set the 'givenName' because it seems like a
person should be able to have a first name. It takes
sn after all.
UPDATE So I tried using
inetOrgPerson, which includes a given name, but after using ldapsearch to check the results, I see the following:
When it should have the given name I used in the ldif. Obviously something is happening, anyone have some insight? Note the two colons after givenName.