I am trying to extend FreeIPA person schema to add the
country field in the default user.
As far as I know, FreeIPA does implement the RFC 4519, which does provide a country field.
When I dump the schema of FreeIPA (via
ldapsearch -x -b cn=schema objectclasses attributetypes > schema.ldif) I see that the country definition is present by default, but it is not part of the person or any extension of the person.
So I have created the following ldif (note that the OID is basically random, I did not yet register anything since I am testing stuff around:
dn: cn=schema changetype: modify add: objectclasses objectclasses: ( 2.25.2866739172111323825341701611583088740618.104.22.168 NAME 'customPerson' SUP person STRUCTURAL MAY (country) X-ORIGIN 'Extending FreeIPA' )
But when I run this via `ldapmodify8 I get the following error:
$ ldapmodify -D "cn=Directory Manager" -W -f customPerson.ldif Enter LDAP Password: modifying entry "cn=schema" ldap_modify: Invalid syntax (21) additional info: object class customPerson: Unknown allowed attribute type "country"
What did I do wrong, and how to fix it so that I can use the
country field in all my users?