title: objectClass: value #3 invalid per syntax
body: <p>I tried to add a user / principal under the domain created so can proceed with further Java testing, so I created <code>add_user.ldif</code> from this <a href="https://community.hortonworks.com/articles/82544/how-to-create-ad-principal-accounts-using-openldap.html" rel="nofollow noreferrer">tutorial</a></p>
  
  <pre><code>dn: cn=exuser,cn=ldapadmin,dc=myapp,dc=local
  changetype: add
  objectClass: top
  objectClass: person
  objectClass: organizationalPerson
  objectClass: user
  distinguishedName: cn=exuser,cn=ldapadmin,dc=myapp,dc=local
  cn: exuser
  userAccountControl: 514
  accountExpires: 0
  userPrincipalName: exuser@ldapadmin.myapp.local
  servicePrincipalName: exuser
  
  dn: cn=exuser,cn=ldapadmin,dc=myapp,dc=local
  changetype: modify
  replace: unicodePwd
  unicodePwd::IgBUAHCAbwCmAHQAMQAxWiUAIgA=
  
  dn: cn=exuser,cn=ldapadmin,dc=myapp,dc=local
  changetype: modify
  replace: userAccountControl
  userAccountControl: 66048
  </code></pre>
  
  <p>The goal is to create a user under component <code>exuser</code> (not yet created) with a password so user can access all the sub elements under the component.</p>
  
  <p>Then I run the <code>ldapadd</code> command, </p>
  
  <pre><code>sudo ldapadd -x -D cn=ldapadm,dc=myapp,dc=local -w secret -f add_user.ldif
  </code></pre>
  
  <p>it met following error</p>
  
  <pre><code>adding new entry "cn=exuser,cn=ldapadmin,dc=myapp,dc=local"
  ldap_add: Invalid syntax (21)
      additional info: objectClass: value #3 invalid per syntax
  </code></pre>
  
  <p>is it possible that <code>user</code> objectClass can't defined under <code>cn</code>? How to fix the issue so I can add this user and is this the correct way to define <code>principal</code>?</p>