Skip to Content.
Sympa Menu

grouper-users - [grouper-users] LDAPPCNG: value of naming attribute 'cn' is not present in entry

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] LDAPPCNG: value of naming attribute 'cn' is not present in entry

Chronological Thread 
  • From: Francesco Malvezzi <>
  • To:
  • Subject: [grouper-users] LDAPPCNG: value of naming attribute 'cn' is not present in entry
  • Date: Wed, 04 Aug 2010 14:06:49 +0200

Thank you for this great piece of software,

I'm trying to setup a test grouper installation bound to local ldap,
following documentation at:

I'm using release 1.6.0.

I've missed something very basic because when I provision, I receive a
[LDAP: error code 64 - value of naming attribute 'cn' is not present in
entry] on all already-inserted groups.

At first groups get inserted correctly:

# unimore:cesia, groupergroups,
dn: cn=unimore:cesia,ou=groupergroups,dc=unimore,dc=it
objectClass: eduMember
objectClass: groupOfNames
objectClass: top
hasMember: malvezzi
member: uid=malvezzi,ou=people,dc=unimore,dc=it
cn: cesia
cn: unimore:cesia

but then when I update the group it tries to change cn, which of course
wont't work, because it is part of the dn. Follows the snippet of the
./ -ldappcng -bulkCalc

<ldappc:calcResponse status='success'
<ldappc:id ID='unimore:cesia'/>
<ldappc:pso entityName='group'>
<psoID ID='cn=unimore:cesia,ou=groupergroups,dc=unimore,dc=it'
<dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
<dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='cn'>
<dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
<capabilityData mustUnderstand='true'
<spmlref:reference xmlns='urn:oasis:names:tc:SPML:2:0'
<spmlref:toPsoID ID='uid=malvezzi,ou=people,dc=unimore,dc=it'

in ldappc-resolver.xml cn is defined as:

<resolver:AttributeDefinition id="group-dn"
structure="${DNstructure}" sourceAttributeID="name"
rdnAttributeName="cn" base="${groupsOU}">
<resolver:Dependency ref="GroupDataConnector" />

<resolver:AttributeDefinition id="cn" xsi:type="ad:Simple"
<resolver:Dependency ref="GroupDataConnector" />

Why it changes a correct multi-valued cn (actually it's me thinking it
is correct: I might be wrong) to a single-valued cn which is not the one
defined in the dn?

What did I wrong?

Which other configuration files do you need to better understand?

Thank you for the attention,

Francesco Malvezzi
University of Modena and Reggio Emilia

Archive powered by MHonArc 2.6.16.

Top of Page