Versions Compared

Old Version 49

changes.mady.by.user Scott Koranda

Saved on

compared with

New Version 50

changes.mady.by.user Benn Oshrin

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Attribute

Object Class

Data Model

Multiple Values Exported?

Attribute Options SupportedIntroduced

cn

person, posixAccount

cm_names

Only the primary name attached to the CO Person is exported

langv0.8

cn

groupOfNames

cm_co_groups name

(error)


v0.8.2
descriptiongroupOfNamescm_co_groups description(error)
v0.8.2
displayNameinetOrgPersoncm_names(error)langv2.0.0

eduPersonAffiliation

eduPerson

cm_co_person_roles affiliation (possibly mapped via cm_co_extended_types)

(tick)

rolev0.8
eduPersonEntitlementeduPersoncm_co_services (according to member cm_co_groups)(tick)
v2.0.0
eduPersonNicknameeduPersoncm_names(tick)langv2.0.0
eduPersonOrcideduPersoncm_identifiers identifier where type is orcid(tick)
v2.0.0

eduPersonPrincipalName

eduPerson

cm_identifiers identifier

(error)


v0.8
eduPersonPrincipalNamePrioreduPersoncm_identifiers identifier(tick)
v2.0.0
eduPersonScopedAffiliationeduPersoncm_co_person_roles affiliation (possibly mapped via cm_co_extended_types, with scope appended)(tick)rolev2.0.0
eduPersonUniqueIdeduPersoncm_identifiers identifier (with scope appended)(error)
v2.0.0

employeeNumber

inetOrgPerson

cm_identifiers identifier

(error)


v0.8

employeeType

(info) While not deprecated, as of v3.2.0 the use of voPersonAffiliation is recommended instead

inetOrgPerson

cm_co_person_roles affiliation

(tick)

rolev0.9.2

facsimileTelephoneNumber

organizationalPerson

cm_telephone_numbers

(tick)

rolev0.8

gecos

posixAccount

cm_names

(error)


v0.9

gidNumber

posixAccount

cm_identifiers identifier where type is gidNumber

(error)


v0.9

givenName

inetOrgPerson

cm_names given

Only the primary name attached to the CO Person is exported

langv0.8

hasMember

eduMember

cm_identifiers identifier

(tick)


v0.8.2

homeDirectory

posixAccount

cm_identifiers identifier where type is homeDirectory

(error)


v0.9

isMemberOf

eduMember

cm_co_groups name
(where cm_co_group_members member is true)

(tick)


v0.8

l

organizationalPerson

cm_addresses locality

(tick)

lang, rolev0.8
labeledURIinetOrgPersoncm_urls url and description (if set)(tick)
v3.1.0

loginShell

posixAccount

Currently hard coded

(error)


v0.9

mail

inetOrgPerson

cm_email_addresses mail

(tick)

rolev0.8

member

groupOfNames

cm_co_ldap_provisioner_dns DN

(tick)


v0.8.2

mobile

inetOrgPerson

cm_telephone_numbers

(tick)

rolev0.8

o

inetOrgPerson

cm_co_person_roles o

(tick)

rolev0.8

ou

organizationalPerson

cm_co_person_roles ou

(tick)

rolev0.8
ownergroupOfNamescm_co_ldap_provisioner_dns DN(tick)
v0.8.2

postalCode

organizationalPerson

cm_addresses postal_code

(tick)

lang, rolev0.8
pwdAccountLockedTimen/a (see pwdPolicy)cm_co_people status (set when status is Expired or Suspended)(error)
v2.0.0
roomNumberinetOrgPersoncm_addresses room(tick)lang, rolev0.9.4

sshPublicKey

ldapPublicKey

cm_ssh_keys

(tick)


v0.9

sn

person

cm_names family

Only the primary name attached to the CO Person is exported

langv0.8

st

organizationalPerson

cm_addresses state

(tick)

lang, rolev0.8

street

organizationalPerson

cm_addresses street

(tick)

lang, rolev0.8

telephoneNumber

organizationalPerson

cm_telephone_numbers

(tick)

rolev0.8

title

organizationalPerson

cm_co_person_roles title

(tick)

rolev0.8

uid

inetOrgPerson, posixAccount

cm_identifiers identifier

(tick)


v0.8

uidNumber

posixAccount

cm_identifiers identifier where type is uidNumber

(error)


v0.9
userPasswordpersoncm_passwords password where type is CRYPT, if Password Authenticator Plugin is enabled(tick)
v3.1.0
voPersonAffiliationvoPerson

cm_co_person_roles affiliation

(tick)

rolev3.2.0
voPersonApplicationUIDvoPerson

cm_identifiers identifier

If attribute options are enabled, see note below

(tick)appv3.2.0
voPersonAuthorNamevoPersoncm_names(tick)langv3.2.0
voPersonCertificateDNvoPersoncm_certificates subject_dn(tick)scopev3.2.0
voPersonCertificateIssuerDNvoPersoncm_certificates issuer_dn(tick)scopev3.2.0
voPersonExternalIDvoPersoncm_identifiers identifier(tick)
v3.2.0
voPersonIDvoPersoncm_identifiers identifier(tick)
v3.2.0
voPersonPolicyAgreementvoPersoncm_co_t_and_c_agreements(tick)timev3.2.0
voPersonSoRIDvoPersoncm_identifiers identifier(tick)
v3.2.0
voPersonStatusvoPerson

cm_co_people status

If attribute options are enabled, cm_co_person_roles status

Only if attribute options are enabledrolev3.2.0

...

Note

posixAccount support is experimental and subject to change in a future release (CO-866). Note the posixAccount Object Class requires cn, uid, uidNumber, gidNumber, and homeDirectory, but the LdapProvisioner does not necessarily enforce this in the configuration.


Info

For ldapPublicKey integration with OpenSSH, you may find this discussion helpful. Also note that recent releases of OpenSSH include a script that queries LDAP for authorized keys.

...