Finally the choice was to support a new SELFDN keyword in binding rules, as it is easier to read (than using targattrfilter).
https://fedorahosted.org/389/attachment/ticket/47653/0005-Ticket-47653-Need-a-way-to-allow-users-to-create-ent.patch
-- 389-devel mailing list 389-devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-devel