Since you are already using python, you could more easily just use
lib389 directly rather
than subprocess to dsconf btw:
from lib389 import DirSrv
I leave just a note on this...
Really at the moment I prefer trust on dsconf. I see that the lib389 documentation is
still work in progress.
Or it's not clear for me where to find the full documentation. For instance, here
it's not clear how to configure all uniqueness plugin parameters.
A more complete documentation seems the following:
but for example it still lacks on some configurations about AttributeUniquenessPlugin,
such as "--subtree-entries-oc" which dsconf manages fine.
Another way to proceed is to manage all attributes and dn directly with LDAP modify
operations, but this would bypass lib389...
Thank you again for all the hints