Re: [Heimdal PATCH] LDAP backend support for OpenLDAP 2.1.x

[Luke Howard <lukeh@PADL.COM>]

>-	ret = LDAP_addmod(&mods, LDAP_MOD_ADD, "objectClass", "person");
>+	/* person is the old structural object class */
>+	/* From the OpenLDAP FAQ-O-Matic: A common error that is encountered when    */
>+	/* upgrading from earlier versions of OpenLDAP is 'invalid structural object */
>+	/* class chain'. This occurs because 2.1.x versions enforce more of the LDAP */
>+	/* structure rules than 2.0.x did, and many directories contain incorrect    */
>+	/* data because of the lax checking of the earlier versions.                 */ 
>+	
>+	/* So we could avoid this problem using the OpenLDAPperson objectclass       */
>+	/* instead of the person object class */
>+	ret = LDAP_addmod(&mods, LDAP_MOD_ADD, "objectClass", "OpenLDAPperson" );
> 	if (ret != 0) {
> 	    goto out;

What's the rationale behind this?


-- Luke

--
Luke Howard | PADL Software Pty Ltd | www.padl.com