I haven't looked into this in enough detail to know whether this was intended, but here's what I'm seeing. Given an existing entry: dn: dc=markmc,dc=org objectClass: top objectClass: domain dc: markmc and wanting to change it to: dn: dc=markmc,dc=org objectClass: top objectClass: domain objectClass: pilotObject dc: markmc info: foo This worked with openldap-clients-2.3.38-3.fc8 as input to ldapmodify: dn: dc=markmc,dc=org changetype: modify add: objectClass objectClass: pilotObject info: foo With openldap-clients-2.4.6-1.fc9, I get this: ldapmodify: wrong attributeType at line 5, entry "dc=markmc,dc=org" Changing to the following works: dn: dc=markmc,dc=org changetype: modify add: objectClass objectClass: pilotObject - add: info info: foo
ldapmodify in OpenLDAP-2.4 has new parser of ldif input, which is fast, but more strict. It you announce that you want to add an attribute, you must add only attribute of the announced type. E.g. using this snippet: changetype: modify add: objectClass you can add only objectClass attributes; info attribute results in the error you see.