[CentOS] ldap: adding user to multiple groups

Thu May 6 18:32:41 UTC 2010
aurfalien at gmail.com <aurfalien at gmail.com>

Sorry for that.

Adding via ldap.

I've tried adding groupOfNames to the users ldif file like so;

objectClass: groupOfNames
...
member: cn=staff,ou=groups,dc=foo,dc=bar
member: cn=pm,ou=groups,dc=foo,dc=bar
Both staff and pm are defined as follows;
# staff, groups, logan.tv
dn: cn=staff,ou=groups,dc=foo,dc=bar
objectClass: top
objectClass: posixGroup
cn: staff
gidNumber: 20
# pm, groups, foo.bar
dn: cn=pm,ou=groups,dc=foo,dc=bar
objectClass: top
objectClass: posixGroup
cn: pm
gidNumber: 200

But every time I try to ldapmodify, I get;

ldapmodify: Object class violation (65)
	additional info: invalid structural object class chain (inetOrgPerson/ 
groupOfNames)



On May 6, 2010, at 11:05 AM, Jacob Bresciani wrote:

> are you adding users to local groups in /etc/group or are you  
> creating groups in ldap?
>
>
> On 2010-05-06, at 11:03 AM, aurfalien at gmail.com wrote:
>
>> Hi all,
>>
>> Not having much luck adding a user to more then 1 group in OpenLDAP
>> thats provided in Centos.
>>
>> Any suggestions to have the outcome of having a user belong to
>> multiple groups?
>>
>> Should I create a new group that has multiple GIDs and assign a user
>> to that new group?  If so, how? :)
>>
>> Thanks in advance.
>> _______________________________________________
>> CentOS mailing list
>> CentOS at centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos/attachments/20100506/0406e890/attachment-0005.html>