<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 12/27/2012 03:49 PM, Orion Poplawski wrote:
<blockquote cite="mid:50DCD092.70903@cora.nwra.com" type="cite">On
12/27/2012 03:26 PM, Orion Poplawski wrote:
<br>
<blockquote type="cite">Has any work been done towards supporting
Apple OS X ldap schema in 389? It
<br>
seems like this is the latest OpenLDAP schema for Apple:
<br>
<br>
<a class="moz-txt-link-freetext" href="http://opensource.apple.com/source/OpenLDAP/OpenLDAP-208.1/OpenLDAP/servers/slapd/schema/apple.schema">http://opensource.apple.com/source/OpenLDAP/OpenLDAP-208.1/OpenLDAP/servers/slapd/schema/apple.schema</a>
<br>
<br>
<br>
Does anyone know of tools that would populate the various apple
specific
<br>
entries like apple-generateduid?
<br>
<br>
Thanks!
<br>
<br>
</blockquote>
<br>
For what it is worth - I ran it through ol-schema-migrate.pl and
got the attached file. But doesn't work:
<br>
<br>
Starting dirsrv:
<br>
cora-ldap2...[27/Dec/2012:15:43:01 -0700] attr_syntax_create -
Error: the SUBSTR matching rule [caseExactIA5SubstringsMatch] is
not compatible with the syntax [1.3.6.1.4.1.1466.115.121.1.24] for
the attribute [apple-birthday]
<br>
[27/Dec/2012:15:43:01 -0700] dse_read_one_file - The entry
cn=schema in file /etc/dirsrv/slapd-cora-ldap2/schema/99apple.ldif
(lineno: 1) is invalid, error code 20 (Type or value exists) -
attribute type lastLoginTime: Does not match the OID
"1.3.6.1.1.1.1.35". Another attribute type is already using the
name or OID.
<br>
<br>
The first looks like incompatibility between:
<br>
<br>
EQUALITY generalizedTimeMatch
<br>
SUBSTR caseExactIA5SubstringsMatch
<br>
</blockquote>
<br>
Right.<br>
<br>
<blockquote cite="mid:50DCD092.70903@cora.nwra.com" type="cite">
<br>
but I'm not familiar with this.
<br>
<br>
lastLoginTime is in 60acctpolicy.ldif:
<br>
<br>
## lastLoginTime holds login state in user entries
(GeneralizedTime syntax)
<br>
attributeTypes: ( 2.16.840.1.113719.1.1.4.1.35 NAME
'lastLoginTime'
<br>
DESC 'Last login time'
<br>
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE USAGE
directoryOperation
<br>
X-ORIGIN 'Account Policy Plugin' )
<br>
</blockquote>
<br>
Arg. This is the problem of using non-standard schema (both in
Apple's case and in our case). Both Apple and 389 defined the
lastLoginTime attribute, and unfortunately they are different.<br>
<br>
I suppose you could just remove 60acctpolicy.ldif from your schema
directory if you want to use the Apple schema. But then you won't
be able to use the Account Policy Plugin to keep track of last login
time and account expiration.<br>
<blockquote cite="mid:50DCD092.70903@cora.nwra.com" type="cite">
<br>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
389 users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
</blockquote>
<br>
</body>
</html>