On ke, 16 maalis 2022, Jean Tomaz da Silva via FreeIPA-users wrote:
Dears,
Is it possible to add a custom subentry to UID object without using the
ldapmodifty tool? Using the ipa cli commands or through of the web ui.
No. Please use LDAP client, whether ldapmodify or any other tool.
My ldif file content is bellow.
dn: Affiliation=1,uid=john,cn=users,cn=accounts,dc=example,dc=com
changetype: add
Affiliation: 1
AffiliationType: employee
objectClass: CustomPerson
objectClass: top
Are you really sure you want an LDAP subentry? This has a specific
meaning in LDAP, namely, what is described in RFC 3672. What you have
above is not an LDAP subentry as it lacks 'ldapsubentry' object class.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland