allow empty groups

https://bugzilla.redhat.com/show_bug.cgi?id=526141
Resolves: bug 526141
Bug Description: allow empty groups
Reviewed by: nhosoi (Thanks!)
Fix Description: Change groupOfNames and groupOfUniqueNames to allow empty
groups by changing the member/uniqueMember attribute from MUST to MAY.
Platforms tested: RHEL5 x86_64
Flag Day: no
Doc impact: no

ldap/schema/00core.ldif

@@ -644,9 +644,9 @@ objectClasses: ( 2.5.6.14 NAME 'device'
 objectClasses: ( 2.5.6.9 NAME 'groupOfNames'
   SUP top
   STRUCTURAL
-  MUST ( member $
-        cn )
-  MAY ( businessCategory $
+  MUST ( cn )
+  MAY ( member $
+        businessCategory $
         seeAlso $
         owner $
         ou $
@@ -659,9 +659,9 @@ objectClasses: ( 2.5.6.9 NAME 'groupOfNames'
 objectClasses: ( 2.5.6.17 NAME 'groupOfUniqueNames'
   SUP top
   STRUCTURAL
-  MUST ( uniqueMember $
-        cn )
-  MAY ( businessCategory $
+  MUST ( cn )
+  MAY ( uniqueMember $
+        businessCategory $
         seeAlso $
         owner $
         ou $