OPENLDAP 2.4.44 on
Now I need to set any attributes as required, is it possible? I need that all users have this attributes required:
- givenName - sn - cn - userPassword - displayName - o
How Can I do?
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
I need that all users have this attributes required:
givenName, sn, cn, userPassword, displayName, o
The relevant information in the subschema is the object class definition (see RFC 4512). So the first question is which object classes you're using for the entries.
First of all: Don't muck with any standard object class definitions!
Furthermore learn about structural vs. auxiliary object classes.
Basically you have two options:
The first solution is most times better because most schema-aware LDAP clients do not understand DIT content rules. Personally I often use a combination of both, especially with NOT in DIT content rules to exclude attributes which should never be added.
As a more complex example you can have a look at how schema is defined for Æ-DIR using OpenLDAP static config method (aka slapd.conf):