I understand that this plugin is purely to satisfy VMWare's applications,
and that's precisely why I want it.
Please note that vCenter also needs the entryUUID to be filed for users if
you wish to add them to local groups, I've seen it requiring those
attributes to the LDAP while dumping traffic.
Le mer. 7 août 2019 à 11:25, thierry bordaz <tbordaz(a)redhat.com> a écrit :
Sorry for the late answer, I am just back from PTO.
I have not implemented the described plugin  but it should not be a
Note that this small plugin is an option to satisfy the vsphere request.
But I do not know if it would be suffisant, it would need some
integration tests with vsphere. In order to confirm that returned
vsphere groups are accepted by vsphere as they are 'groupofnames' and
contains 'member' instead of being 'groupofuniquenames' and containing
'uniquemember'. I think there is a good chance it will work as vsphere
is not requesting those attributes.
On 8/6/19 3:24 PM, Alexander Bokovoy wrote:
> Hello Thelvaën,
> I added Thierry in CC:.
> Thiery, do you have any prototyping code for a plugin that could be
> written to implement the data transformation experiment we ran to
> identify how we can translate uniqueMembers?
> Thelvaën wants to help to develop such plugin.
> On ma, 05 elo 2019, Thelvaën Mandel via FreeIPA-devel wrote:
>> Having to work with multiple vCenters, and a quite big directory, I
>> searched quite extensively how to get the 2 to work together, and I
>> to find that reference:
>> After digging further and inquiring about it on IRC, I was redirected
>> by ab who said that Thierry might have more information about this
>> I'm currently reverse engineering existing plugins and I am planning
>> to use
>> the SLAPI_PLUGIN_PRE_SEARCH_FN hook instead
>> of slapi_compute_add_search_rewriter written in the doc to harmonize it
>> with the SLAPI_PLUGIN_POST_SEARCH_FN needed to process the results.
>> I'll be happy for any help/feedback you could provide.
>> P.S. : plugin source will be available to the community once it has been
>> completed or reached enough maturity to be used in its experimental
>> FreeIPA-devel mailing list -- freeipa-devel(a)lists.fedorahosted.org
>> To unsubscribe send an email to
>> Fedora Code of Conduct:
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives: