OpenLDAP/FreeBSD: How to implement attribute HOST without STRUCTURAL account?

Jonathan Chen jonc at
Tue Apr 29 10:51:44 UTC 2008

On Tue, Apr 29, 2008 at 10:07:44AM +0000, O. Hartmann wrote:
> Hello out there,
> my question may sound a bit weird, but the situation is as follows:
> I use OpenLDAP 2.4 for authetication purposes within our lab's net and 
> every user's account is of the objectclass 'posixAccount'. As we know, 
> this class does not contain the attribute 'host', which belongs to 
> structural class 'account' and both posixAccount and account  are of 
> type structural and therefore can not be mixed.

Is there really such a rule? There's an of examples in
O'Reilly's "LDAP System Administration" that has a mixed
"account" + "posixAccount" objectClasses for a node to implement
the situation of: One User and a Group of Hosts.
Jonathan Chen <jonc at>
                                                 Vini, vidi, velcro...
                                         I came, I saw, I stuck around

More information about the freebsd-questions mailing list