Re: [Freeipa-users] Extending attributes

2016-04-08 Thread Steve Huston
And after a bit more hacking around, I seem to have hit on the answer. For one thing, the way I wrote it wouldn't work because the dn_container would have been wrong anyway (previously it worked because users are in the same container as other users, but in this case it would fail since the object'

Re: [Freeipa-users] Extending attributes

2016-04-08 Thread Steve Huston
On Fri, Apr 8, 2016 at 3:50 AM, Petr Vobornik wrote: > I didn't examine it thoroughly. But basically: IPA management framework > does "cn" -> "dn" conversion in pre_callback (host-add, host-mod). But > then it needs to do the reverse on post_callback (host-add, host-mod, > host-show, maybe also ho

Re: [Freeipa-users] Extending attributes

2016-04-08 Thread Petr Vobornik
On 04/07/2016 11:57 PM, Steve Huston wrote: > Finding very little on the Interwebs about this, I wonder if I'm the > only person who's trying to add things to FreeIPA and doing UI and > backend plugins! > > The back story, I'm coming from an OpenLDAP deployment which I need to > update for various