abbra commented on a pull request """ 'uid' in user object and 'cn' in group object have meaning in POSIX environments. 'cn' in other objects is not subject for strict limits. """ See the full comment at https://github.com/freeipa/freeipa/pull/82#issuecomment-247541965