在LDAP中更改passwordPolicy objectClass

我有用于添加attributeType passwordNonRootMayResetUserpwd的ff LDIF文件。 attributeType已经存在。

dn: cn=schema changetype: modify delete: objectClasses objectClasses: ( 1.3.6.1.4.1.42.2.27.9.2.6 NAME 'passwordPolicy' SUP top STRUCTURAL MUST cn MAY ( description $ passwordMaxAge $ passwordExp $ passwordMinLength $ passwordInHistory $ passwordChange $ passwordWarning $ passwordLockout $ passwordMaxFailure $ passwordResetDuration $ passwordUnlock $ passwordLockoutDuration $ passwordCheckSyntax $ passwordMustChange $ passwordStorageScheme $ passwordMinAge $ passwordResetFailureCount $ passwordExpireWithoutWarning $ passwordRootdnMayBypassModsChecks ) ) dn: cn=schema changetype: modify add: objectClasses objectClasses: ( 1.3.6.1.4.1.42.2.27.9.2.6 NAME 'passwordPolicy' SUP top STRUCTURAL MUST cn MAY ( description $ passwordMaxAge $ passwordExp $ passwordMinLength $ passwordInHistory $ passwordChange $ passwordWarning $ passwordLockout $ passwordMaxFailure $ passwordResetDuration $ passwordUnlock $ passwordLockoutDuration $ passwordCheckSyntax $ passwordMustChange $ passwordStorageScheme $ passwordMinAge $ passwordResetFailureCount $ passwordExpireWithoutWarning $ passwordRootdnMayBypassModsChecks $ passwordNonRootMayResetUserpwd ) ) 

我得到的错误，我卡住了。

 $ ldapmodify -h host -p 8888 -D "cn=Directory Manager" -f delete_add.ldif Enter bind password: modifying entry cn=schema ldap_modify: DSA is unwilling to perform ldap_modify: additional info: objectclasses: No target attribute type or object class specified 

我不知道是什么导致这个错误，因为attributeType存在以及objectClass。

编辑：此LDAP服务正在Sun OS 10上运行。

• Dovecot LDA（交付）和LDAP组
• 将SAP GUI与Microsoft ldap集成
• LDAP + TLS – 两台机器上的不同行为
• Kerberos LDAP和Ubuntulogin
• stdout，stderr，还有什么？ （疯狂parsingslapadd输出）

 dn: cn=schema changetype: modify add: attributeTypes attributeTypes: ( 1.3.6.1.4.1.42.2.27.9.1.782 NAME 'passwordNonRootMayResetUserpwd' DESC 'Sun ONE defined password policy attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-DS-USE 'internal' X-ORIGIN 'Sun ONE Directory Server' ) 

 dn: cn=schema changetype: modify add: objectClasses objectClasses: ( 1.3.6.1.4.1.42.2.27.9.2.6 NAME 'passwordPolicy' SUP top STRUCTURAL MUST cn MAY ( description $ passwordMaxAge $ passwordExp $ passwordMinLength $ passwordInHistory $ passwordChange $ passwordWarning $ passwordLockout $ passwordMaxFailure $ passwordResetDuration $ passwordUnlock $ passwordLockoutDuration $ passwordCheckSyntax $ passwordMustChange $ passwordStorageScheme $ passwordMinAge $ passwordResetFailureCount $ passwordExpireWithoutWarning $ passwordRootdnMayBypassModsChecks $ passwordNonRootMayResetUserpwd ) )