CentOS - Jun 2010 - posixGroup LDIF problem

Hi,all:

  I'm working on populating an OpenLDAP server (Dapper) for pam
authentication.  I'm having trouble import LDIFs for my groups. The
following is and example:

(this imports on CentOS 5.3 i386,  openldap version is 2.3.43-3.el5 )

# org.X.admins
dn: cn=admins,dc=X,dc=org
changetype: add
objectClass: groupOfNames
objectClass: top
objectClass: posixGroup
cn: admins
gidNumber: 1001
member: cn=admin,dc=X,dc=org

I get the following error:

adding new entry "cn=admins,dc=X,dc=org"
ldap_add: Object class violation (65)
additional info: invalid structural object class chain
(groupOfNames/posixGroup)

Now, if I strip it down a little, this will import:

dn: cn=admins,dc=X,dc=org
changetype: add
objectClass: posixGroup
cn: admins
gidNumber: 1001

I don't see though how this is supposed to tie to a user without the member
entries.

So what is the wrong with it ?Could someone give me some suggestions?

Thanks ~
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.centos.org/pipermail/centos/attachments/20100629/ec82f2df/attachment.html>

On Tue, Jun 29, 2010 at 07:11:00PM +0800, sync wrote:
> dn: cn=admins,dc=X,dc=org
> changetype: add
> objectClass: groupOfNames
> objectClass: top
> objectClass: posixGroup
> cn: admins
> gidNumber: 1001
> member: cn=admin,dc=X,dc=org
Shouldn't these members be membeUid and just be the local unix username?
"fred", "john", "harry" etc.

I thought posixGroup went like this:

  dn: cn=admins,dc=X,dc=org
  cn: admins
  gidnumber: 1001
  objectClass: top
  objectClass: posixGroup
  memberUid: john
  memberUid: fred
  memberUid: harry

-- 

rgds
Stephen