Most probably i don't. At least i have never created one, neither did this 
refer anything like that. 

How do i do it? 

Sándor Juhász 
System Administrator 
ChemAxon Ltd . 
Building Hx, GraphiSoft Park, Záhony utca 7, Budapest, Hungary, H-1031 
Cell: +36704258964 

From: "Alexander Bokovoy" <> 
To: "Sandor Juhasz" <> 
Sent: Thursday, January 19, 2017 3:22:34 PM 
Subject: Re: [Freeipa-users] modify schema - add group email and display 

On to, 19 tammi 2017, Sandor Juhasz wrote: 
>One more issue. Service user cannot see the new attribute. It does see the 
>dn: cn=schema 
>changetype: modify 
>add: objectclasses 
>objectclasses: ( 
>NAME 'groupMail' 
>SUP top 
>MAY ( mail $ displayname ) 
>X-ORIGIN 'Extending FreeIPA' ) 
>Service user: 
>Regular user: 
admin is not a regular user. 

>They both see objectclass=groupmail, but uid=googlesync does not birng back 
>mail and displyaname, while using ldapsearch. 
Do you have an ACI that allows to actually see the attribute? 

/ Alexander Bokovoy 
Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to