Hi all,

We’ve added two objectclasses to the default user in our FreeIPA instance. We’re able to set and modify them fine, however we need two additional functions.

We need two additional attributes auedupersonsharedtoken and edupersonprinciplename to be included in the user attributes when executing user-find with the python-freeipa module. It works fine from the command line by adding the --all argument, but there’s no equivalent to --all the python-freeipa module.

We need to be able to user-find to search for users by these attributes, both from the command line and the python-freeipa module. There does not seem to be an equivalent of the --setattr command on the find function to search by attributes provided by additional objectclass schema.

Regards,

Aaron Hicks