I have set up OpenLDAP 2.4.50 on alpine 3.12.1 and fed cosine
, inetorgperson
and nis
LDIF schemas to it using ldapadd
. Now I wanted to add a custom object class. I added an entry cn=mystuff,cn=schema,cn=config
, objectclass olcSchemaConfig
which worked fine. Now I wanted to add an new objectClass that would provide me some kind of account class with extra information. The idea is simple: create an objectClass that inherits from person
as well as posixAccount
. Her goes my LDIF...
dn: cn={4}mystuff,cn=schema,cn=config
changetype: modify
add: olcObjectClasses
olcObjectClasses: ( 1.3.6.1.4.1.999999.1.2.3 NAME 'myAccount' DESC 'A full acc
ount as I want it.' SUP ( person $ posixAccount ) STRUCTURAL )
The problem is that OpenLDAP wouldn't let me. It states olcObjectClasses: user-defined ObjectClass has inappropriate SUPerior: "posixAccount"
I suppose multiple inheritance is not allowed in LDAP the way I'm trying to use it but I couldn't find any reference telling me why.
To make a long story short: how can I create an objectClass that comprises of both, person
and posixAccount
? And if it's not possible, please tell me exactly why.