[Freeipa-devel] Mapping of CLI attributes to LDAP attributes

[Adam Young]

On 01/19/2011 10:53 AM, Jan Zelený wrote:
> Hi,
> I've been thinking about the concept of mapping CLI attributes to LDAP
> attributes (ticket #447) and I'd like to get a second opinion.
>
> The most simple solution would be to add this functionality to existing help.
> For the sake of lucidity, it should be hidden by default. To achieve this a
> new parameter (e.g. --fullhelp) would be created. The question now is if this
> approach is suitable for WebUI and whether it is even needed for WebUI.
>
> Another approach might be to create new command, e.g. mapping-show, which
> would take one argument - either name of LDAP object for which we want to show
> all mappings or (better) directly a command. Here are examples how it could be
> invoked:
> ipa mapping-show user        / ipa mapping-show user-add
> ipa mapping-show hbacrule / ipa mapping-show hbacrule-add
>
> So these are my ideas. Some questions? Comments? Other ideas? I welcome any
> input.
>
The second is fairly similar to the metadata call we use for the WebUI