ldap_add错误太模糊了

Question

I am using php-ldap to manage posix accounts on a linux machine. I am able to search the database in php. And I am able to add users via the command line "ldapadd". However, when I try to add a user via PHP ldap_add, I get an "Object class violation" error (errno 65).

I have tried everything I can think of, but the error has not changed. I have even looked to see if there is an alternative to php-ldap, but have not found one.

The problem is when I look up that error in the general LDAP guide, it says "This error is returned with the entry to be added or the entry as modified violates the object class schema rules. Normally additional information is returned the error detailing the violation." And then it lists 8 possible causes.

I need this more in depth error, but cannot find it. ldap_error was also no help. Any ideas how to dig deaper here?

Answer 1

I figured out how to dig deeper. I am using Ubuntu which was dumping logs to /var/log/{debug,syslog}

In order to get more info I had to increase the log level to 424 in /etc/ldap/slapd.d/cn=config.ldif

Then I was able to see the error in the logs which told me what I was doing wrong... using a dc attribute with an inetOrgPerson objectClass.

Thanks.