...
Attribute | Object Class | Data Model | Multiple Values Exported? | Attribute Options Supported | Introduced |
|---|---|---|---|---|---|
cn | person, posixAccount, voPosixAccount | Only the primary name attached to the CO Person is exported | lang | v0.8 | |
cn | groupOfNames | cm_co_groups name |
| v0.8.2 | |
| cn | voPosixGroup | cm_identifiers identifier | Only if attribute options are enabled | scope | v3.3.0 |
| description | groupOfNames | cm_co_groups description |  | v0.8.2 | |
| displayName | inetOrgPerson | cm_names | | lang | v2.0.0 |
eduPersonAffiliation | eduPerson | cm_co_person_roles affiliation (possibly mapped via cm_co_extended_types) |
| role | v0.8 |
| eduPersonEntitlement | eduPerson | cm_co_services (according to member cm_co_groups) |  | v2.0.0 | |
| eduPersonNickname | eduPerson | cm_names | | lang | v2.0.0 |
| eduPersonOrcid | eduPerson | cm_identifiers identifier where type is orcid | | v2.0.0 | |
eduPersonPrincipalName | eduPerson | cm_identifiers identifier |
| v0.8 | |
| eduPersonPrincipalNamePrior | eduPerson | cm_identifiers identifier | | v2.0.0 | |
| eduPersonScopedAffiliation | eduPerson | cm_co_person_roles affiliation (possibly mapped via cm_co_extended_types, with scope appended) | | role | v2.0.0 |
| eduPersonUniqueId | eduPerson | cm_identifiers identifier (with scope appended) | | v2.0.0 | |
employeeNumber | inetOrgPerson | cm_identifiers identifier |
| v0.8 | |
employeeType
| inetOrgPerson | cm_co_person_roles affiliation |
| role | v0.9.2 |
facsimileTelephoneNumber | organizationalPerson |
| role | v0.8 | |
gecos | posixAccount |
| v0.9 | ||
gidNumber | posixAccount | cm_identifiers identifier where type is |
| v0.9 | |
givenName | inetOrgPerson | cm_names given | Only the primary name attached to the CO Person is exported | lang | v0.8 |
hasMember | eduMember | cm_identifiers identifier |
| v0.8.2 | |
homeDirectory | posixAccount | cm_identifiers identifier where type is |
| v0.9 | |
isMemberOf | eduMember | cm_co_groups name |
| v0.8 | |
l | organizationalPerson | cm_addresses locality |
| lang, role | v0.8 |
| labeledURI | inetOrgPerson | cm_urls url and description (if set) | | v3.1.0 | |
loginShell | posixAccount | Currently hard coded |
| v0.9 | |
inetOrgPerson | cm_email_addresses mail |
| role | v0.8 | |
member | groupOfNames |
| v0.8.2 | ||
mobile | inetOrgPerson |
| role | v0.8 | |
o | inetOrgPerson |
| role | v0.8 | |
ou | organizationalPerson |
| role | v0.8 | |
| owner | groupOfNames | cm_co_ldap_provisioner_dns DN | | v0.8.2 | |
postalCode | organizationalPerson | cm_addresses postal_code |
| lang, role | v0.8 |
| pwdAccountLockedTime | n/a (see pwdPolicy) | cm_co_people status (set when status is Expired or Suspended) | | v2.0.0 | |
| roomNumber | inetOrgPerson | cm_addresses room | | lang, role | v0.9.4 |
sshPublicKey | ldapPublicKey |
| v0.9 | ||
sn | person | cm_names family | Only the primary name attached to the CO Person is exported | lang | v0.8 |
st | organizationalPerson | cm_addresses state |
| lang, role | v0.8 |
street | organizationalPerson | cm_addresses street |
| lang, role | v0.8 |
telephoneNumber | organizationalPerson |
| role | v0.8 | |
title | organizationalPerson | cm_co_person_roles title |
| role | v0.8 |
uid | inetOrgPerson, posixAccount, voPosixAccount | cm_identifiers identifier |
| scope | v0.8 |
uidNumber | posixAccount | cm_identifiers identifier where type is |
| v0.9 | |
| userPassword | person | cm_passwords password where type is CRYPT, if Password Authenticator Plugin is enabled | | v3.1.0 | |
| voPersonAffiliation | voPerson | cm_co_person_roles affiliation |
| role | v3.2.0 |
| voPersonApplicationPassword | voPerson | cm_passwords password, see below for more | Only if attribute options are enabled | app | v3.3.0 |
| voPersonApplicationUID | voPerson | cm_identifiers identifier If attribute options are enabled, see note below | | app | v3.2.0 |
| voPersonAuthorName | voPerson | cm_names | | lang | v3.2.0 |
| voPersonCertificateDN | voPerson | cm_certificates subject_dn | | scope | v3.2.0 |
| voPersonCertificateIssuerDN | voPerson | cm_certificates issuer_dn | | scope | v3.2.0 |
| voPersonExternalID | voPerson | cm_identifiers identifier | | v3.2.0 | |
| voPersonID | voPerson | cm_identifiers identifier | | v3.2.0 | |
| voPersonPolicyAgreement | voPerson | cm_co_t_and_c_agreements | | time | v3.2.0 |
| voPersonSoRID | voPerson | cm_identifiers identifier | | v3.2.0 | |
| voPersonStatus | voPerson | cm_co_people status If attribute options are enabled, cm_co_person_roles status | Only if attribute options are enabled | role | v3.2.0 |
| voPersonToken | voPerson | cm_totp_tokens serial | | type | v4.0.0 |
| voPosixAccountGecos | voPosixAccount | cm_unix_cluster_accounts gecos | Only if attribute options are enabled | scope | v3.3.0 |
| voPosixAccountGidNumber | voPosixAccount | cm_identifiers identifier | Only if attribute options are enabled | scope | v3.3.0 |
| voPosixAccountHomeDirectory | voPosixAccount | cm_unix_cluster_accounts home_directory | Only if attribute options are enabled | scope | v3.3.0 |
| voPosixAccountLoginShell | voPosixAccount | cm_unix_cluster_accounts login_shell | Only if attribute options are enabled | scope | v3.3.0 |
| voPosixAccountUidNumber | voPosixAccount | cm_unix_cluster_accounts uid | Only if attribute options are enabled | scope | v3.3.0 |
While not deprecated, as of v3.2.0 the use of voPersonAffiliation is recommended instead...