Jean Tomaz da Silva via FreeIPA-users wrote:
Is there a reason you aren't simply adding the objectclass and attribute
directly to the entry? Why does it need to be part of the dn?
Great question, Rob! It's a requirement of the internal system( another application ).
I have the same thinking as you. The object class and attributes are enough.
I think, the true problem that is necessary enumerate the affiliation types:
For instance:
affiliation | affiliationType | affiliationDate
1 | employee | 20181120
2 | partner | 20201120
A DN (ex: uid=john) entry can have one or more RDNs.
Best regards,
Jean Tomaz
> rob