Description of problem: Behavior of querying cn=schema has changed 389-ds-base-1.2.3 $ ldapsearch -LLL -x -b "cn=schema" dn: cn=schema objectClass: top objectClass: ldapSubentry objectClass: subschema cn: schema fedora-ds-base-1.2.0-4.fc11.i586 ldapsearch -LLL -x -b "cn=schema" |more dn: cn=schema objectClass: top objectClass: ldapSubentry objectClass: subschema cn: schema objectClasses: ( 2.5.6.0 NAME 'top' DESC 'Standard LDAP objectclass' ABSTRACT MUST objectClass X-ORIGIN 'RFC 2256' ) objectClasses: ( 2.5.20.1 NAME 'subschema' DESC 'Standard LDAP objectclass' SU P top AUXILIARY MAY ( dITStructureRules $ nameForms $ dITContentRules $ objec tClasses $ attributeTypes $ matchingRules $ matchingRuleUse ) X-ORIGIN 'RFC 2 252' ) ... Version-Release number of selected component (if applicable): 389-ds-base-1.2.3-1.fc12.x86_64
The attributes you need are operational, and are now required to be specified explicitly on the command line, as with other operational attribtes. For example, the ldapjdk LDAPSchema class uses this as the attribute list: "*", "ldapSyntaxes", "matchingRules", "attributeTypes", "objectClasses"