<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 08/01/2014 11:56 AM, Tomas Babej
wrote:<br>
</div>
<blockquote cite="mid:53DB6454.3010508@redhat.com" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<br>
<div class="moz-cite-prefix">On 08/01/2014 11:42 AM, <a
moz-do-not-send="true" class="moz-txt-link-abbreviated"
href="mailto:barrykfl@gmail.com">barrykfl@gmail.com</a> wrote:<br>
</div>
<blockquote
cite="mid:CAELz9dtO-A+5oOvkW4OVeTH6bOGNVVS--o34bBCz9LWjTWR8-g@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Hi:</div>
<div><br>
</div>
<div>I follow command found from here and want to del priate
group but fail any idea?</div>
<div>It said line 5 attribute error , any synta xwrong?</div>
<div><br>
</div>
<div>ldapsearch -LLL -Y GSSAPI cn=barry</div>
<div><br>
</div>
<div> ldapmodify -Y GSSAPI <<EOF</div>
<div>dn: cn=barry,cn=groups,cn=accounts,dc=abc,dc=com</div>
<div>changetype: modify</div>
<div>delete: objectclass</div>
<div>objectclass: mepManagedEntry</div>
<div> delete: mepManagedBy</div>
<div>dn: cn=barry,cn=groups,cn=accounts,dc=abcdc=com</div>
<div>changetype: delete</div>
<div>EOF</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
You need to first delete the mepManagedBy attribute, since it is
allowed by the mepManagedEntry objectclass, and then removing the
objectclass itself.<br>
</blockquote>
you should be able to do this in one modify operation, if the
attribute is a required attribute you even have to do it in one mod.
Schema checking is done after all the mods of an operations are
applied. In the original mod I think the separator of sub operations
is missing, it should be:<br>
<br>
<div>dn: cn=barry,cn=groups,cn=accounts,dc=abc,dc=com</div>
<div>changetype: modify</div>
<div>delete: objectclass</div>
<div>objectclass: mepManagedEntry<br>
-<br>
</div>
<div>
delete: mepManagedBy<br>
<br>
<br>
</div>
<blockquote cite="mid:53DB6454.3010508@redhat.com" type="cite"> <br>
Performing the operations in reverse order leaves you with
mepManagedBy in the entry, which is not allowed by any
objectclass.<br>
<tt><br>
</tt><tt>#!RESULT OK</tt><tt><br>
</tt><tt>#!DATE 2014-08-01T09:53:38.820</tt><tt><br>
</tt><tt>dn:
cn=random,cn=groups,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=c</tt><tt>om</tt><tt><br>
</tt><tt>changetype: modify</tt><tt><br>
</tt><tt>delete: mepManagedBy</tt><tt><br>
</tt><tt>-</tt><tt><br>
</tt><tt><br>
</tt><tt>#!RESULT OK</tt><tt><br>
</tt><tt>#!DATE 2014-08-01T09:53:45.511</tt><tt><br>
</tt><tt>dn:
cn=random,cn=groups,cn=accounts,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com</tt><tt><br>
</tt><tt>changetype: modify</tt><tt><br>
</tt><tt>delete: objectClass</tt><tt><br>
</tt><tt>objectClass: mepManagedEntry</tt><tt><br>
</tt><tt>-</tt><br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Tomas Babej
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org </pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
</body>
</html>