Created attachment 9142 [details] Samba 4 object class I installed a custom LDAP schema following this description: https://wiki.samba.org/index.php/Samba4/Schema_extenstions My object class is auxiliary and has only optional attributes. The problem is that when I try to add the object class to a user then this is not possible in combination with one of the optional attributes. I must first add the object class and in a second step add the attribute. Error message: ldap_modify: Object class violation (65) additional info: 00002014: objectclass_attrs: attribute 'passwordSelfResetAnswer' on entry 'CN=myuser,DC=samba4,DC=test' does not exist in the specified objectclasses! Used LDIF: dn: CN=myuser,DC=samba4,DC=test changetype: modify add: objectClass objectClass: passwordSelfReset - add: passwordSelfResetAnswer passwordSelfResetAnswer: 123 - Splitting the LDIF and adding the object class first will work. Any ideas why Samba refuses the modify? Zarafa also uses auxiliary object classes and there it works. The schema files are attached. Samba is Sernet Samba appliance 4.0.8.
Created attachment 9143 [details] Samba 4 attributes