Re: getting LDAP_ALREADY_EXISTS when trying to modify

[Chris R. <chr...@me...>]

Giulia Carcione <gi...@be...> wrote:
> i'm using Net::LDAP::LDIF and Net::LDAP::Entry to attempt to modify
> directory entries, while bound to the directory as directory manager.
>
> i get LDAP_ALREADY_EXISTS, which i don't understand--
> isn't it true that an update using changetype: modify will overwrite the
> existing value for the attribute?

LDAP_ALREADY_EXISTS is actually the LDAP error entryAlreadyExists, which 
you would only get back if you tried to add an entry which was already 
there. It is not an error you would expect back if you were modifying some 
attributes - you'd get back something like noSuchAttribute 
(LDAP_NO_SUCH_ATTRIBUTE) or constraintViolation (LDAP_CONSTRAINT_VIOLATION) 
or attributeOrValueExists (LDAP_TYPE_OR_VALUE_EXISTS) if something went 
wrong during a modify. (This is not an exhaustive list of errors :-)

Try setting debug => 12 when calling 'new', to see the protocol between the 
client and the server, and please post the output. (Delete any passwords 
etc from the output...)

> % cat ldif.final
> dn: uid=sally, ou=People, dc=mydomain, dc=com
> changetype: modify
> replace: managerchain
> managerchain: joe lisa john bill larry
>
>
> thanks,
>
> giulia
>

The LDIF looks OK to me.

Cheers,

Chris