Hello LDAP gurus,

When we create a Drupal/LDAP user account using LDAP Integration and LDAP Provisioning we receive the following error if we let Drupal auto generate the password:

ldap_modify(): Modify: Object class violation in /www/sites/all/modules/ldap_integration/includes/LDAPInterface.inc on line 260.

The user account gets created ok but the LDAP Data profile fields do not get populated with any of the information entered on the account creation page.

This error does not occur if we enter a password in the account creation.

Drupal version : 6.26
PHP version : 5.3.3

Any ideas? Do you need any more info?
Thank you,
- Vince Tingey

Comments

vincetingey’s picture

vincetingey commented

There seems to be only one error entry in our LDAP server logs related to this.

[25/Jun/2012:15:59:33 -0700] - Entry "uid=testuser,ou=People,dc=example,dc=com" missing attribute "cn" required by object class "mslperson"

mslperson is our custom class that contains our extended profile attributes. It extends inetorgperson.

vincetingey’s picture

vincetingey commented
Status: Active » Fixed

My bad!

I figured out the issue. We are using LDAP provisioning to set the "cn" attribute to "!first_name !last_name" upon account creation but ALSO are using LDAP Data to map a field "legal name" to the "cn" attribute. This field is exposed in the creation form and the error would occur when the "legal name" field contents did not match "!first_name !last_name". Doing this caused LDAP Data to try and modify the newly created user with an incorrect "cn" attribute which gave the error.

After figuring this out I tried creating and using a custom attribute in LDAP Provisioning but it would not work for me.
http://drupal.org/node/467090

We eventually just gave up and removed the "legal name" field from the registration form.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.