I am not sure its so straightforward on the Linux side. I want to add a new attribute to identify users as Contractor or Government. Is this recommended or possible within LDAP?

  • It is certainly possible to modify the LDAP schema to add an attribute, assuming that a suitable attribute in a class does not already exist. For example, inetOrgPerson already has "employee type" which might be suitable. However, you could also model the domain differently (using a different/additional OU for example), or perhaps just using groups. I think providing a few scenarios about how you want to filter/search, etc. would help. – KevinO Jul 18 '18 at 14:43
  • Thank you. For example: ipa user-show jdoe -all would show a field of Status: Contractor or Status: Government. – Mervyn Clarke Jul 18 '18 at 14:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.