@csarrazi Can you have a look here?

@estahn can you try adding the 'debug' => true option in your service, in order to have more information?

This is probably a limitation due to your LDAP server only letting you edit a limited set of attributes. It is not a bug from the component, but rather a limitation due to server configuration.

This should be fixed once a better implementation of #21856 will be implemented (I suggested an implementation in the related PR).

@estahn Can you please give feedback on @csarrazi's comment?

@estahn did you manage to try the solution proposed by @csarrazi? Thanks!

ping @estahn :)

Sorry for the late response. I will have a look this week.

Closing for now due to the lack of a reproducer. Please leave a comment with more information and we can consider to reopen.

update dosen't work. I have the same Error (Constraint violation).

updating the entry with mod_replace works with following code:

if (!@ldap_mod_replace($con, $dn, $data)) { throw new LdapException(sprintf('Could not modify entry "%s": %s', $dn, ldap_error($con))); }

@Sonny333Black Are you able to provide a small reproducer?

@xabbuh because by some attributes I don't have the premission
to update. I need a methode in the entry-manager that updating a single attribute like a mod_replace.

@xabbuh because by some attributes I don't have the premission
to update. I need a methode in the entry-manager that updating a single attribute like a mod_replace.

+1

@vittore see #21328 (comment)

Using Microsoft Active Directory.

Not working example :

$search = $ldap->query($ldap_base_dn, $query); // A generic query
$result = $query->execute();
$entry = $result[0];
$entry->setAttribute('mail', ['[email protected]']);
$entryManager = $ldap->getEntryManager();
$entryManager->update($entry);  // Throws "Constraint violation" exception

Working example:

$search = $ldap->query($ldap_base_dn, $query); // A generic query
$result = $query->execute();
$entry = $result[0];
$entryManager = $ldap->getEntryManager();
$entry2 = new Entry($entry->getDn(), ['mail' =>'[email protected]']);
$entryManager->update($entry2);   // Successfully update

To give some feedback on this, the original intent for the component was to implement a change manager for the LDAP entries. E.g. being able to do entry->replaceAttribute($attr, $val) or entry->addAttribute($attr, $val) (difference between single-valued and multi-valued attributes), and have the entry object provide its own changes to the EntryManager.