Some LDAP servers do not support nested entities

Some LDAP servers do not allow all entity types to be created under all entity types.

If you want to create an entity type under an entity type that LDAP doesn't support, then you need to modify the schema.

For example, if you want to create a group under a group in Active Directory, by default, the operation is not supported. The object class group needs to be added as one of the superior object classes for groups.

Example

Following is an example on how to do this on Active Directory:
  1. Open Active Directory Schema Editor.
  2. Select Classes.
  3. Select the object class that you want to create (for example, group)
  4. Select Relationship tab.
  5. Select the object class of the parent (for example, group)
  6. Click the Add Superior button.
  7. Click OK.

Icon that indicates the type of topic Concept topic

Terms and conditions for documentation | Feedback


Timestamp icon Last updated: March 30, 2016 13:35
http://www14.software.ibm.com/webapp/wsbroker/redirect?version=cord&product=vmm&topic=someldapserversdonotsupportnestedentities
File name: someldapserversdonotsupportnestedentities.html