Schema extension involving userPassword attribute causes DS to crash.

  • 3003726
  • 07-Jun-2006
  • 10-Jun-2013

Environment


Novell eDirectory 8.7.3.8 for All Platforms
Novell eDirectory 8.8 for All Platforms

Situation

Schema extensions for DS that involve the userPassword attribute will cause DS to crash.  The problem lies in how the LDAP Server is interpreting the schema and passing it along to DS.  For this reason extending the schema from a .sch file (as opposed to a .ldif file) should still work.

Resolution

This issue only affects eDirectory 8.7.3.8 and 8.8 and is considered as a future enhancement.  If a server with a version of eDirectory less-than 8.7.3.8 is available that should not be affected.

Telling the class that is added to the schema to have a superclass of ndsloginproperties also resolves the issue.  See the note below to see how to modify the schema to add that attribute.

This issue is slated to be resolved with eDirectory 8.7.3.9 and 8.8.2.

Additional Information

#Modified schema to work around bug.
dn: cn=schema
changeType: modify
add: objectClasses
objectClasses: ( xPosixAccount-oid NAME 'xPosixAccount'
 SUP ndsloginproperties
 AUXILIARY
 DESC 'Abstraction of an account with POSIX attributes'
 MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory )
 MAY ( userPassword $ loginShell $ gecos $ description ) )


#Original LDIF.
#dn: cn=schema
#changeType: modify
#add: objectClasses
#objectClasses: ( xPosixAccount-oid NAME 'xPosixAccount'
# AUXILIARY
# DESC 'Abstraction of an account with POSIX attributes'
# MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory )
# MAY ( userPassword $ loginShell $ gecos $ description ) )