9.4. Turning Schema Checking On and Off

When schema checking is on, the Directory Server ensures three things:

The object classes and attributes using are defined in the directory schema.
The attributes required for an object class are contained in the entry.
Only attributes allowed by the object class are contained in the entry.

Schema checking is turned on by default in the Directory Server, and the Directory Server should always run with schema checking turned on. The only situation where is may be beneficial to turn schema checking off is to accelerate LDAP import operations. However, there is a risk of importing entries that do not conform to the schema. Consequently, it is impossible to search for these entries.

To turn schema checking on and off, do the following:

In the Directory Server Console, select the Configuration tab.
Highlight the server icon at the top of the navigation tree, then select the Settings tab in the right pane.
To enable schema checking, check the Enable Schema Checking checkbox; clear it to turn off schema checking.
Click Save.

To turn schema checking on and off using LDAP commands, edit the value of the nsslapd-schemacheck attribute. For example:

ldapmodify -h myserver -p 389 -D "cn=directory manager" -w secretpwd

dn: cn=config 
changetype: modify 
replace: nsslapd-schemacheck: on 
nsslapd-schemacheck: off

For information, see the Directory Server Configuration, Command, and File Reference.