Derek Chen-Becker wrote: > On 08/03/2011 01:10 PM, Michael Ströder wrote: >> 3. Somewhat hackish: Define a DIT content rule for organizationalUnit and add >> the needed attributes to MAY in this. >> >> 1. and 2. requires you to transform your data. >> >> 3. does not require data changes but some rather naive schema-aware LDAP >> clients might refuse to handle the additional attributes. > > The software that consumes this right now (postfix) seems blissfully > ignorant of any schema since it handles our modified organizationalUnits > just fine. If/when we get an opportunity to rewrite the software I'll > definitely take a look at option #1, since that seems the cleanest, but > for now where might I find more details on #3?
In your case: dITContentRule ( 2.5.6.5 NAME 'organizationalUnit-dcr' MAY ( mail ) ) See RFC 4512 section 4.1.6. for details. Ciao, Michael.
