LDAP gives "LBURP operation failed: 65 (Object class violation)" error

(Last modified: 24Aug2005)

This document (10098696) is provided subject to the disclaimer at the end of this document.

fact

Novell eDirectory 8.7.3 for All Platforms

Novell ZENworks for Servers

Novell ZENworks 6.5 Server Management - ZfS65

symptom

Attempting to change the password on a Zen 6.5 sp1b Subscriber object using the ICE (NDS Import/Export wizard in ConsoleOne) gives a "LBURP operation failed: 65 (Object class violation)" error. Here is an example ChgPwd.LDIF file and its  log (object names changed):

ChgPwd.LDIF File:

version: 1
dn: cn=Subscriber_NWFS1,ou=WH,ou=Subscribers,ou=TED,ou=ZEN,o=Novell
changetype: modify
add: userpassword
userpassword: subscriber_password

ICE Output:

Novell ICE ConsoleOne native interface for Novell eDirectory 8.7
version: 10410.37
Copyright 2000 Novell, Inc.  All rights reserved.  Patent Pending.
Novell ICE ConsoleOne native interface for Novell eDirectory 8.7
version: 10410.37
Copyright 2000 Novell, Inc.  All rights reserved.  Patent Pending.
Source Handler: ICE LDIF handler for Novell eDirectory 8.7 version: 10410.37
Destination Handler: ICE LDAP handler for Novell eDirectory 8.7 version:
10410.37
ICE log file: ice.log
Start time: Friday, August 19, 2005
Operation in progress ...

Record 1: LBURP operation failed: 65(Object class violation), dn:
cn=Subscriber_NWFS1,ou=WH,ou=Subscribers,ou=TED,ou=ZEN,o=Novell

Total entries processed: 1
Total number of errors: 1
End time: Friday, August 19, 2005
Total Time:  0:00:01.010
Time per entry: 00:01.010

LAN traces of the LDAP attempt show a -608 (ERR_ILLEGAL_ATTRIBUTE) as a response from the LDAP server.

cause

The LDIF file is attempting to create the "userpassword" attribute on the Subscriber. The Subscriber has a base class of "zentedSubscriber2". This class (nor any of it's parent / super classes) has "userpassword" as an optional or required attribute. In essence, its not allowed to use this attribute for this kind of object, which causes it to give back the -608 or "65(Object class violation)" error.

fix

Add the "userpassword" attribute as an optional attribute for the "zentedSubscriber2" class or one of it's super classes (in this case it would be recommended to add it to "zentedNode2" since it is a super class for Subscriber and Distributor objects). This can be accomplished by doing the following:

1. Launching ConsoleOne (with the eDirectory snapins installed).
2. Highlight the tree (top most object just under NDS, has a graphic of a big tree with a small tree in front and slightly right).
3. Click on Tools / Schema Manager.
4. Scroll down on the Classes tab for "zentedNode2", highlight this and click the "Info" button.
5. Click the "Add Attribute" button.
6. Scroll down the "Available attributes" column for "userPassword", click the right pointing arrow button in the middle.
7. Click "Ok" and then "Close".

document

Document Title:	LDAP gives "LBURP operation failed: 65 (Object class violation)" error
Document ID:	10098696
Solution ID:	NOVL103209
Creation Date:	24Aug2005
Modified Date:	24Aug2005
Novell Product Class:	novell directory services

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.