Hi Dieter, It was a great idea to actual search for the objectClass on the server... The objectClass 'groupOfPermisssions' was already in my Doku but not on the server...
Shame on me Thanks a lot. JOhn -----Ursprüngliche Nachricht----- Von: openldap-technical [mailto:[email protected]] Im Auftrag von Dieter Klünter Gesendet: Freitag, 28. August 2015 15:24 An: [email protected] Betreff: Re: Permission management with LDAP Am Fri, 28 Aug 2015 12:16:48 +0000 schrieb "Fischer, Johannes" <[email protected]>: > Hi, > > I've tried your idea. It worked well with groupOfNames. > Then I've tried to implement the memberof overlay for a user specific > objectClass: Dn: olcOverlay={1} > objectClass: olcConfig > objectClass: olcOverlayConfig > objectClass: olcMemberOf > olcOverlay: memberof > olcMemberOfDangling: ignore > olcMemberOfRefInt: TRUE > olcMemberOfGroupOC: GroupOfPermissions > olcMemberOfMemberAD: permissionMember > olcMemberOfMemberOfAD: member > > While adding the ldif, a "unable to find group objectClass=" > GroupOfPermissions "" The objectClass is available on the server and > is a self created objectclass. Do I have to include some paths to > announce the objectClass? [...] Check whether groupOfPermissions is loaded at all: ldapsearch -x -H ldap://localhost -b cn=subschema -s base + \ | grep -A2 'groupOfPermisssions' and what is the syntax of permissionmember and member? -Dieter -- Dieter Klünter | Systemberatung http://sys4.de GPG Key ID: E9ED159B 53°37'09,95"N 10°08'02,42"E
