On to, 17 maalis 2022, Jean Tomaz da Silva via FreeIPA-users wrote:
Sorry! I confused RDN with subentry. The freeipa permit only RDN types
uid, cn, ou, and soon. I want insert the leftmost RDN "affiliation" in a DN,
with the value '1'. I adjusted my ldif again with RDN "affiliation" to
start with the lower letter.
dn: affiliation=1,uid=john,cn=users,cn=accounts,dc=example,dc=com
changetype: add
affiliation: 1
affiliationType: employee
objectClass: CustomPerson
objectClass: top
Can you please explain why do you need this behavior and what exactly
does not work for you when you are adding the record through
ldapmodify/ldapadd?
I'm developing a web self-register to my users using the Python
FreeiPA
API (
https://python-freeipa.readthedocs.io/en/latest/).
FYI, FreeIPA development team has no relation to python-freeipa project.
We do not endorse it nor check its compatibility. As far as I know, it
does not have a comprehensive test suite against FreeIPA either.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland