Return-Path: Delivered-To: apmail-directory-users-archive@www.apache.org Received: (qmail 67997 invoked from network); 20 May 2010 11:43:09 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 20 May 2010 11:43:09 -0000 Received: (qmail 85288 invoked by uid 500); 20 May 2010 11:43:09 -0000 Delivered-To: apmail-directory-users-archive@directory.apache.org Received: (qmail 85240 invoked by uid 500); 20 May 2010 11:43:08 -0000 Mailing-List: contact users-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@directory.apache.org Delivered-To: mailing list users@directory.apache.org Received: (qmail 85232 invoked by uid 99); 20 May 2010 11:43:08 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 20 May 2010 11:43:08 +0000 X-ASF-Spam-Status: No, hits=2.2 required=10.0 tests=FREEMAIL_FROM,HTML_MESSAGE,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of softwarezman@gmail.com designates 209.85.214.178 as permitted sender) Received: from [209.85.214.178] (HELO mail-iw0-f178.google.com) (209.85.214.178) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 20 May 2010 11:43:00 +0000 Received: by iwn4 with SMTP id 4so4640718iwn.37 for ; Thu, 20 May 2010 04:42:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:mime-version:received:from:date :message-id:subject:to:content-type; bh=RoDRs0h8PrHbQejO75kCbdYkB5AIeuhKda6EbSnn4oo=; b=tPi33ucBmwgUkMvRyrRNeTY4dqXzjwYIap24hm9D3m35zezxDAoRQ7yq8P3SVij7FA jJgpZQ+z4c15MUzJlT22FOfY53UzdeqOXA5jK43iXaQeskjzN/9usvKyO5MEc+zo7w5D hEhTi/72Vto9pEDLP4ieAqi/S/G6RCtB/diqg= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:from:date:message-id:subject:to:content-type; b=cZ30u0suneTHqPn8uTw9FzHiZJKZGPLneqMA+S4iK54qUFkkyh3DoqNKUMoQ/zKA6y DLlwEQ37voKNps6/Lb04WTaw5/X6RGT3p/QmQGo3WbQhsTjmCocEUG9Ixple4NCHNlm6 2/r8e3NorPu7GU3RlqT9Rij1gzzuID2leVmlo= Received: by 10.231.148.143 with SMTP id p15mr5087487ibv.15.1274355759839; Thu, 20 May 2010 04:42:39 -0700 (PDT) MIME-Version: 1.0 Received: by 10.231.32.194 with HTTP; Thu, 20 May 2010 04:42:19 -0700 (PDT) From: Zane Wright Date: Thu, 20 May 2010 07:42:19 -0400 Message-ID: Subject: According to the schema attribute administrativeRole is not allowed! To: users@directory.apache.org Content-Type: multipart/alternative; boundary=0016e6475fee61fb7c0487051227 X-Virus-Checked: Checked by ClamAV on apache.org --0016e6475fee61fb7c0487051227 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hello all, I have been trying to go through the Apache Directory tutorials to get myself up to speed on their implementation of LDAP but I came across a problem. When going through the basic authorization tutorial for 1.5, specifically the =93Simple example for the ACI subsystem=94 I tried to add = the attribute administrativeRole but got the error: =93Warning! According to th= e schema attribute administrativeRole is not allowed!=94 I have enabled the accessControlEnabled option and restarted the service, and have tried to continue through this problem and finish the tutorial but every step along the way I would get the same error for subtreeSpecification, and prescriptiveACI additions. Suffice it to say that when I run through the =91testing=92 part of the dem= o I can connect and query but when I run the query with my new full permissions user I get no results and continue to get no results until I log in with th= e system admin account. Can anybody help me with this problem? I=92m sure it= =92s something easy but I cannot find any reference to this specific error anywhere other than inside the source. As a note, I=92m running the latest version of Apache Directory Server with Server 2008 64 bit and the latest JDK 1.5 release. Thanks, Zane Wright --0016e6475fee61fb7c0487051227--