How to Extend the NDS eDirectory Schema
Articles and Tips: tip
01 Oct 2000
In order to extend NDS eDirectory schema, you need the LDIF (RFC 2252) format file and the ldapmodify LDAP SDK tool. The following procedure is applicable to all supported eDirectory platforms.
If you are trying to import schema from other directory formats (such as Netscape or Microsoft Active Directory), you will also need the SCHMIG tool that is available from http://developer.novell.com/ndk. This tool will take the schema from other directory formats and generate an LDIF format file. However, you should review this file before extending the server's schema. NDS follows referential integrity, which means that attributes should exist before the class can be created.
Command to Extend the Schema
The command to extend the schema is as follows:
ldapmodify b o=novell -h <IP_Address> -D "Admin Context" -w password < <LDIF File>
Command to Verify the Schema Extension
The command to verify the schema extension is as follows:
ldapsearch -b cn=schema -s base -h IP_Address -T -D cn=admin,o=novell -w password -l 100 (objectclass=subschema) objectclasses attributetypes
Sample Attributes and Class Information
Here is a list of sample attributes and class information:
dn: cn=schema changetype: modify add: attributetypes attributetypes: ( 1.2.840.1135184.108.40.20600.1 NAME accessMode123' SYNTAX 220.127.116.11.4.1.1418.104.22.168.15 SINGLE-VALUE ) attributetypes: ( 1.2.840.113522.214.171.12400.2 NAME 'CAccess123' SYNTAX 126.96.36.199.4.1.14188.8.131.52.27 SINGLE-VALUE ) dn: cn=schema changetype: modify add: objectclasses objectclasses: ( 1.2.840.1135184.108.40.20600.3 NAME 'aclProfileAux' AUXILIARY MAY ( 1.2.840.1135220.127.116.1100.1 $ 1.2.840.113518.104.22.16800.2 ) )
* Originally published in Novell AppNotes
The origin of this information may be internal or external to Novell. While Novell makes all reasonable efforts to verify this information, Novell does not make explicit or implied claims to its validity.