Anonymous_User Absent Member.
Absent Member.
433 views

Dynamic groups and and adding structural objectClass


Hello,

I have a dynamic group called 'self-visio_Utilisateur'

The ldif is below


Code:
--------------------
dn: cn=self-visio_Utilisateur,ou=Groups,ou=CONTOSO,ou=COM,o=FABRIKAM
changetype: add
objectClass: dynamicGroup
objectClass: groupOfNames
objectClass: ndsLoginProperties
objectClass: Top
memberQueryURL: ldap:///OU=SIPESP,OU=COM,O=FABRIKAM??sub?(&(espbalg=non)(objec
tClass=espPerson))
cn: self-visio_Utilisateur
--------------------


Importing this to eDirectory 8.8.6 Linux by LDAP Browser is OK

When trying to add an objetClass (structural) called 'espProfil' the
operation is rejected and the error : [LDAP: error code 65 - NDS
error: object class violation (-628)] is thrown by the LDAP browser

is there any specific constraints when using 'dynamicGroup' ?

What could be the source of the problem ?

Regards


--
iammi
------------------------------------------------------------------------
iammi's Profile: https://forums.netiq.com/member.php?userid=382
View this thread: https://forums.netiq.com/showthread.php?t=48418

Labels (1)
0 Likes
6 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Dynamic groups and and adding structural objectClass

Please show us the resulting LDIF that would be there from your new
addition to this dynamic group, or describe, in detail, how you are adding it.

Good luck.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Dynamic groups and and adding structural objectClass


Hello,

I will describe in details the problem

My goal is to create a dynamic group and add a custom objectClass to
this object in order to enable some custom attributes on this dynamic
group

Creating the dynamic groupe with the provided ldif ( my first message )
is OK

The custom objectClass I am trying to add to the existing entry is
'espProfil', this objectClass is available in schema

IAM TRYING TO ADD IT AS AN ATTRIBUTE "objectClass : espProfil"

The error resulting is bellow :

#!RESULT ERROR
#!CONNECTION ldap://ldap-dev-01.lan:389
#!DATE 2013-08-19T12:36:07.183
#!ERROR [LDAP: error code 65 - NDS error: object class violation
(-628)]
dn: cn=self-visio_Utilisateur,ou=Groups,ou=CONTOSO,ou=COM,o=FABRIKAM
changetype: modify
add: objectclass
objectclass: espProfil


FOR YOUR INFORMATION : Adding "objectclass: espProfil" to non-dynamic
group does not throw any error, so I told my self may be dynamic group
are not compatible with the operation I am doing


--
iammi
------------------------------------------------------------------------
iammi's Profile: https://forums.netiq.com/member.php?userid=382
View this thread: https://forums.netiq.com/showthread.php?t=48418

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Dynamic groups and and adding structural objectClass

If this is not an auxiliary (aux) class then what you are trying to do is
not allowed. For example, if this is an effective (is that what you mean
by "structural") class then it is something from which objects can be
created. An auxiliary class, though, is one which extends another
existing object (not class) by allowing the administrator to assign any
attributes linked to the aux class to any objects extended with that aux
class.

If this is an aux class, I think what you are doing should work. If it is
not, then while you can create a new object from this class you should not
be able to extend any other objects with it. To me your post does not
exclude the possibility of this being an effective class, and also does
not exclude the possibility that the "non-dynamic group" is not a
completely new object (for example, if espProfil is a group of some kind
itself).

The -628 error code almost makes me think you are somehow specifying the
wrong object in the first place (typo in the DN or something). Have you
verified everything there is okay? The DN is the same as your first post,
but it is an odd message to get on an existing object, imo.

Good luck.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Dynamic groups and and adding structural objectClass

On Mon, 19 Aug 2013 12:44:02 +0000, iammi wrote:

> The custom objectClass I am trying to add to the existing entry is
> 'espProfil', this objectClass is available in schema


Export this object class definition from the schema to an LDIF and post
it here so we can see what it looks like.


--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.netiq.com

Please post questions in the forums. No support provided via email.

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Dynamic groups and and adding structural objectClass


The issue is solved

in fact 'espProfil' has some inheritance incompatibilities with
dynamicGroups objectClass as it was also structural

I solved the isse by duplicating 'espProfil' but as an auxilary class
called 'espProfilAux'

Thank you for your help

Regards


--
iammi
------------------------------------------------------------------------
iammi's Profile: https://forums.netiq.com/member.php?userid=382
View this thread: https://forums.netiq.com/showthread.php?t=48418

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Dynamic groups and and adding structural objectClass


Great! A good lesson - always always always use Aux Classes if you can
achieve what you want with them.


--
ataubman
------------------------------------------------------------------------
ataubman's Profile: https://forums.netiq.com/member.php?userid=301
View this thread: https://forums.netiq.com/showthread.php?t=48418

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.