I am building a new LDAP structure. I'd like to separate the LDIF-scripts for the creation of my structure from the scripts for the creation of my users. The structure will have to be applied on multiple servers (DTAP) but the users will only be used in unit-tests/development.
But when I create my group, Apache DS (only for development) tells me
member is a required attribute of
ERR_279 Required attributes [member(220.127.116.11)] not found within entry cn=USER_ROLE, ou=groups, dc=company, dc=com ]
More concrete; what I am looking to accomplish is the following LDIF.
### Create the group dn: cn=USER_ROLE, ou=groups, dc=company, dc=com objectClass: groupOfNames objectClass: top cn: USER_ROLE # Not adding a member here ### Create the user dn: uid=myUser, ou=accounts, dc=company, dc=com objectClass: inetOrgPerson objectClass: top # More properties ### Add user to group dn: cn=USER_ROLE, ou=groups, dc=company, dc=com changetype: modify add: member member: uid=myUser, ou=accounts, dc=company, dc=com
I've tried adding an empty
member: to the initial creation of the group. Which works, but leaves an empty member and does not look like a clean solution.