Re: [webmin-l] recent changes to LDAP User Admin

[Murray T. <mtr...@ce...>]

> It used to work because I did set up a few users but I updated to 1.290
> and now, I've got a problem.
> 
> Saving a 'user', I get "Failed to save user : Failed to modify user in
> LDAP database : attribute "gn" not allowed
> 
> which of course means that I am showing the givenName and sn fields and
> have entries in them (in fact, this entry was created with earlier
> version of webmin/ldap user admin) and I merely clicked on it to edit it
> and then clicked on save to produce the error.
> 
> I've been fooling around with config and now have it set to
> 'inetOrgPerson' for 'Objectclass to add for givenName' but have tried
> person, organizationalPerson to no avail.
> 
> I am using Fedora Directory Server
> 
> The objectclasses of the record I am editing (for clarification
> purposes) are:
> person, organizationalPerson, inetOrgPerson, posixAccount, top,
> sambaSamAccount, ShadowAccount (in order per LDAP Attributes if that is
> significant)
> 
> I have no problem using Fedora Directory console and adding the
> 'givenName' but I can never edit and save a user unless I completely
> remove all contents of the givenName field.
> 
> I have the impression that there is no 'gn' alias to 'givenName'
> attribute - especially when I see things like this...
> 
> http://directory.fedora.redhat.com/wiki/Howto:phpLdapAdmin#How_to_create_a_posixUser_in_Fedora_DS
> 
> Craig

Hi Craig,

Is an there an entry in your LDAP schema like the one in Openldap's
core.schema below?  Maybe you can hack that to make it all work?

Murray

attributetype ( 2.5.4.42 NAME ( 'givenName' 'gn' )
        DESC 'RFC2256: first name(s) for which the entity is known by'
        SUP name )