On Няд, 24 мая 2026, Aram Akhavan via FreeIPA-users wrote:
Hi,

I'm working on a small update to authelia (web authn/oidc provider that
can use free-ipa as a backend) and was wondering if we can depend on sn
and givenName to exist for all users back through a reasonable history
of freeipa versions? I want to map those to OIDC claims, but it will
cause problems if they don't exist.

sn and givenName exist in all FreeIPA versions. Both these attributes
defined as mandatory for IPA user objects in IPA API:

        Str('givenname',
            cli_name='first',
            label=_('First name'),
        ),
        Str('sn',
            cli_name='last',
            label=_('Last name'),
        ),

(the definitions above have no ? or additional characters after the
name, hence they do no modify the presence requirement).

--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland

--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://forge.fedoraproject.org/infra/tickets/issues/new

Reply via email to