Hi!
Out DIT holds user entries that have multiple "mail" attributes (main email, aliases). Here is an example entry: dn: eduPersonPrincipalName=user@example.com,dc=example,dc=com mail: nickname@example.com mail: user@example.com mail: user.name@example.com
Our application (e.g. WordPress) authenticates against the 389DS and also pull some additional attributes, needed by the application. In this case the email address. The application picks up the first mail attribute received and uses it as the user's email. In this case would be "nickname@example.com", which is unwanted. The desired outcome would be the "user.name@example.com" displayed as first. By what algorithm/logic do the attributes get sorted? Time added perhaps? Is there any way of influencing this sorting?
We were also thinking of putting the "main" email into another attribute. Which attribute would be appropriate for something like this?
Regards, Mitja
On 08/19/2013 09:12 AM, Mitja Mihelič wrote:
Hi!
Out DIT holds user entries that have multiple "mail" attributes (main email, aliases). Here is an example entry: dn: eduPersonPrincipalName=user@example.com,dc=example,dc=com mail: nickname@example.com mail: user@example.com mail: user.name@example.com
Our application (e.g. WordPress) authenticates against the 389DS and also pull some additional attributes, needed by the application. In this case the email address. The application picks up the first mail attribute received and uses it as the user's email. In this case would be "nickname@example.com", which is unwanted. The desired outcome would be the "user.name@example.com" displayed as first. By what algorithm/logic do the attributes get sorted? Time added perhaps?
Undefined.
Is there any way of influencing this sorting?
No.
We were also thinking of putting the "main" email into another attribute. Which attribute would be appropriate for something like this?
There is an attribute 'mailAlternateAddress' - not sure what it is used for
Regards, Mitja
After a bit more time with the Console I changed the order of the attributes within the textbox(?) that displays the mail attribute values. Please see the attached screenshots. Ldapsearch output also confirms the new order. The change seems persistent, at least for now. I do not know what happened in the background.
Do you think this could also be done from the command line?
Regards, Mitja
-- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
On 08/19/2013 05:22 PM, Rich Megginson wrote:
On 08/19/2013 09:12 AM, Mitja Mihelič wrote:
Hi!
Out DIT holds user entries that have multiple "mail" attributes (main email, aliases). Here is an example entry: dn: eduPersonPrincipalName=user@example.com,dc=example,dc=com mail: nickname@example.com mail: user@example.com mail: user.name@example.com
Our application (e.g. WordPress) authenticates against the 389DS and also pull some additional attributes, needed by the application. In this case the email address. The application picks up the first mail attribute received and uses it as the user's email. In this case would be "nickname@example.com", which is unwanted. The desired outcome would be the "user.name@example.com" displayed as first. By what algorithm/logic do the attributes get sorted? Time added perhaps?
Undefined.
Is there any way of influencing this sorting?
No.
We were also thinking of putting the "main" email into another attribute. Which attribute would be appropriate for something like this?
There is an attribute 'mailAlternateAddress' - not sure what it is used for
Regards, Mitja
On 08/21/2013 04:21 PM, Mitja Mihelič wrote:
After a bit more time with the Console I changed the order of the attributes within the textbox(?) that displays the mail attribute values. Please see the attached screenshots. Ldapsearch output also confirms the new order. The change seems persistent, at least for now. I do not know what happened in the background.
Do you think this could also be done from the command line?
you could do this with ldapmodify by doing replace: mail mail: mail1 mail: mail2 mail: mail3.
But be aware that there is no guarantee that this order does not change. Although LDAP defines the values of an attribuet as set, which means NO order, directory server tries to preserve the order the attribute values have been added. But there may still be some cases eg in replication where an entry is modified on different servers and update resolution determines the valid set of values the order could be lost.
If you really want to have only one primary mail address, you should only have one mail value and put the others into mailalternateaddress ( if your clients can handle that)
Ludwig
Regards, Mitja
-- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
On 08/19/2013 05:22 PM, Rich Megginson wrote:
On 08/19/2013 09:12 AM, Mitja Mihelič wrote:
Hi!
Out DIT holds user entries that have multiple "mail" attributes (main email, aliases). Here is an example entry: dn: eduPersonPrincipalName=user@example.com,dc=example,dc=com mail: nickname@example.com mail: user@example.com mail: user.name@example.com
Our application (e.g. WordPress) authenticates against the 389DS and also pull some additional attributes, needed by the application. In this case the email address. The application picks up the first mail attribute received and uses it as the user's email. In this case would be "nickname@example.com", which is unwanted. The desired outcome would be the "user.name@example.com" displayed as first. By what algorithm/logic do the attributes get sorted? Time added perhaps?
Undefined.
Is there any way of influencing this sorting?
No.
We were also thinking of putting the "main" email into another attribute. Which attribute would be appropriate for something like this?
There is an attribute 'mailAlternateAddress' - not sure what it is used for
Regards, Mitja
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
On 08/21/2013 08:21 AM, Mitja Mihelič wrote:
After a bit more time with the Console I changed the order of the attributes within the textbox(?) that displays the mail attribute values. Please see the attached screenshots. Ldapsearch output also confirms the new order. The change seems persistent, at least for now.
Ok, it may work for now, but it is not guaranteed to work, and may break unexpectedly in the future.
I do not know what happened in the background.
Do you think this could also be done from the command line?
Yes - ldapmodify.
Regards, Mitja
-- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
On 08/19/2013 05:22 PM, Rich Megginson wrote:
On 08/19/2013 09:12 AM, Mitja Mihelič wrote:
Hi!
Out DIT holds user entries that have multiple "mail" attributes (main email, aliases). Here is an example entry: dn: eduPersonPrincipalName=user@example.com,dc=example,dc=com mail: nickname@example.com mail: user@example.com mail: user.name@example.com
Our application (e.g. WordPress) authenticates against the 389DS and also pull some additional attributes, needed by the application. In this case the email address. The application picks up the first mail attribute received and uses it as the user's email. In this case would be "nickname@example.com", which is unwanted. The desired outcome would be the "user.name@example.com" displayed as first. By what algorithm/logic do the attributes get sorted? Time added perhaps?
Undefined.
Is there any way of influencing this sorting?
No.
We were also thinking of putting the "main" email into another attribute. Which attribute would be appropriate for something like this?
There is an attribute 'mailAlternateAddress' - not sure what it is used for
Regards, Mitja
Makes sense on both accounts. I will look into replicating this with ldapmodify. Thank you.
Regards, Mitja
On 08/21/2013 05:07 PM, Rich Megginson wrote:
On 08/21/2013 08:21 AM, Mitja Mihelič wrote:
After a bit more time with the Console I changed the order of the attributes within the textbox(?) that displays the mail attribute values. Please see the attached screenshots. Ldapsearch output also confirms the new order. The change seems persistent, at least for now.
Ok, it may work for now, but it is not guaranteed to work, and may break unexpectedly in the future.
I do not know what happened in the background.
Do you think this could also be done from the command line?
Yes - ldapmodify.
Regards, Mitja
-- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
On 08/19/2013 05:22 PM, Rich Megginson wrote:
On 08/19/2013 09:12 AM, Mitja Mihelič wrote:
Hi!
Out DIT holds user entries that have multiple "mail" attributes (main email, aliases). Here is an example entry: dn: eduPersonPrincipalName=user@example.com,dc=example,dc=com mail: nickname@example.com mail: user@example.com mail: user.name@example.com
Our application (e.g. WordPress) authenticates against the 389DS and also pull some additional attributes, needed by the application. In this case the email address. The application picks up the first mail attribute received and uses it as the user's email. In this case would be "nickname@example.com", which is unwanted. The desired outcome would be the "user.name@example.com" displayed as first. By what algorithm/logic do the attributes get sorted? Time added perhaps?
Undefined.
Is there any way of influencing this sorting?
No.
We were also thinking of putting the "main" email into another attribute. Which attribute would be appropriate for something like this?
There is an attribute 'mailAlternateAddress' - not sure what it is used for
Regards, Mitja
389-users@lists.fedoraproject.org