How to add/set attribute "collectiveParentRDN" in DSEE6.3.1 installation.

Question

Hi,
I'm new to DSEE and I have a question ,
I have a code which
1. First it binds to LDAP server through a proxy user.
2. Authenticates a user
3. Gathers all the roles that a user is a member of.
It uses ,”collectiveParentRDN ” as a DN attribute.
For e,g,in following line from the code:
userDN = attrs.get("collectiveParentRDN").get().toString();
But I’m getting userDN as null as there is no attribute called collectiveParentRDN in the LDAP schema I’m using.
However when I use “entryDN” instead, it works.
But I need to use “collectiveParentRDN” . and I'm not able to configure this attribute in the
When I try to add this attribute I get a constraint /schema violation error.
Can anyone please tell me how to add /set this attribute to DSEE6.3.1 LDAP server.?
Here is the complete code snippet:
import java.util.ArrayList;
import java.util.Hashtable;
import javax.naming.Context;
import javax.naming.NamingEnumeration;
import javax.naming.directory.Attributes;
import javax.naming.directory.DirContext;
import javax.naming.directory.InitialDirContext;
import javax.naming.directory.SearchControls;
import javax.naming.directory.SearchResult;
public class LDAPPrototype {
     public static final String LDAP_URL = "ldap://localhost:389";
     public static final String LDAP_LDAPSERVER_SEARCHBASE = "o=MyLDAP";
     public static final String SECURITY_AUTHENTICATION_METHOD = "simple";
     public static final String INITIAL_CONTEXT_FACTORY = "com.sun.jndi.ldap.LdapCtxFactory";
     public static final String LDAP_USER_GROUP_ATTR = "nsRole";
     private static final String LDAP_USER_LOGIN = "dsingh1";
     private static final String LDAP_USER_PASSWORD = "password";
     // NOTE: Three new params for authenticating proxy.
     public static final String LDAP_PROXY_PROXYDN = "uid=will,ou=Blue,ou=People,o=MyLDAP";
     public static final String LDAP_PROXY_UID = "will";
     public static final String LDAP_PROXY_PASSWORD = "password";
     // NOTE: TWO new params to get users correct DN after search
     public static final String LDAP_USER_DN_ATTR = "collectiveParentRDN";
     public static final String LDAP_USER_CN_ATTR = "cn";
     public static void ldapAuthentication() {
          Hashtable env = new Hashtable();
          Hashtable cloneEnv = new Hashtable();
          DirContext ctx = null;
          String userDN = null;
          String userCN = null;
          String searchBase = null;
          try {
               env.put(Context.SECURITY_AUTHENTICATION,
                         SECURITY_AUTHENTICATION_METHOD);
               env.put(Context.INITIAL_CONTEXT_FACTORY, INITIAL_CONTEXT_FACTORY);
               env.put(Context.PROVIDER_URL, LDAP_URL);
               cloneEnv = new Hashtable(env);
               env.put(Context.SECURITY_PRINCIPAL, LDAP_PROXY_PROXYDN);
               env.put(Context.SECURITY_CREDENTIALS, LDAP_PROXY_PASSWORD);
               ctx = new InitialDirContext(env);
               System.out.println("Initial bind succesful");
               SearchControls searchCtls = new SearchControls();
               String[] returnedAtts = { LDAP_USER_DN_ATTR, LDAP_USER_CN_ATTR };
               searchCtls.setReturningAttributes(returnedAtts);
               searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
               String searchFilter = "(uid=" + LDAP_USER_LOGIN + ")";
               searchBase = LDAP_LDAPSERVER_SEARCHBASE;
               System.out.println("Checking for user !!!");
               NamingEnumeration answer = ctx.search(searchBase, searchFilter,
                         searchCtls);
               System.out.println("User search successful !!!");
               Attributes attrs = null;
               while (answer.hasMore()) {
                    System.out.println("Searching for user attrributes!!!");
                    // Print all the user attributes
                    SearchResult sr = (SearchResult) answer.next();
                    attrs = sr.getAttributes();
                    System.out.println("Num of attributes = " + attrs.size());
                    // NamingEnumeration attrKeys = attrs.getIDs();
                    // while (attrKeys.hasMore()) {
                    // String at = attrKeys.next().toString();
                    // System.out.println("Key = " + at + ", value = " +
                    // attrs.get(at).get());
                    if (attrs.get(LDAP_USER_DN_ATTR) != null) {
                         System.out.println("User DN found for user: "
                                   + LDAP_USER_LOGIN);
                         userDN = attrs.get("collectiveParentRDN").get().toString();
                         System.out.println("User DN = " + userDN);
                    if (attrs.get(LDAP_USER_CN_ATTR) != null) {
                         System.out.println("User CN found for user: "
                                   + LDAP_USER_LOGIN);
                         userCN = attrs.get(LDAP_USER_CN_ATTR).get().toString();
                         System.out.println("User CN = " + userCN);
                    if ((userDN != null) && (userCN != null)) {
                         break;
               userDN = LDAP_USER_CN_ATTR + "=" + userCN + "," + userDN;
               System.out.println("Modified user DN = " + userDN);
               cloneEnv.put(Context.SECURITY_PRINCIPAL, userDN);
               cloneEnv.put(Context.SECURITY_CREDENTIALS, LDAP_USER_PASSWORD);
               System.out.println("Authenticating user : " + userDN);
               ctx = new InitialDirContext(cloneEnv);
               System.out.println("Authenticated user : " + userDN);
               System.out.println("Get user groups !!!");
               String[] returnedGroups = { LDAP_USER_GROUP_ATTR };
               searchCtls.setReturningAttributes(returnedGroups);
               NamingEnumeration groups = ctx.search(searchBase, searchFilter,
                         searchCtls);
               ArrayList<String> groupList = new ArrayList<String>();
               while (groups.hasMore()) {
                    // Print all the user attributes
                    SearchResult sr = (SearchResult) groups.next();
                    attrs = sr.getAttributes();
                    if (attrs.get(LDAP_USER_GROUP_ATTR) != null) {
                         System.out.println("Num of groups found = " + attrs.size());
                         String groupName = attrs.get(LDAP_USER_GROUP_ATTR).get()
                                   .toString();
                         groupList.add(groupName);
                         System.out.println("Group found = " + groupName);
          } catch (Exception e) {
               System.out.println(e);
               e.printStackTrace();
     public static void main(String[] args) {
          ldapAuthentication();
}Thanks in Advance.
Rahul

Answer 1

You are right, that attribute is not in the schema.
I think perhaps that could be the reason I'm getting an schema violation error when I'm trying to add it.
Can you please tell me how do I add any new attribute to the schema ?
Thanks in advance
Rahul.