On ti, 25 helmi 2020, Mary Georgiou via FreeIPA-users wrote:
Hello all,
I'd like to add to the FreeIPA 389DS more user and group containers.
For example currently, the default one is cn=users, cn=accounts,
dc=example,dc=com and I'd like to add OU=something, cn=accounts,
dc=example,dc=com and under it cn=some_other_users,OU=something,
cn=accounts, dc=example,dc=com etc. Is this possible without breaking
everything in FreeIPA (considering that I'd like the entries in that
part of the tree to be handled as accounts that can be added to groups
etc)?
The design of FreeIPA is built around flat DIT. That is, no OUs. There
are quite a few places which this design is hardcoded because it
simplified a lot. Thus, adding OUs is not supported and not planned.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland