<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>I think </div><div><span style="font-family: "courier new", courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;">ipa permission-mod "System: Read Groups" --includedattrs=mail --includedattrs=displayname</span></div><div>solved my issue.</div><div><br></div><div data-marker="__SIG_PRE__"><div><small style="font-size: 10pt; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 10pt; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><span color="#077179" face="Verdana" style="font-size: 10pt; color: #077179; font-family: Verdana;" data-mce-style="font-size: 10pt; color: #077179; font-family: Verdana;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><b style="font-size: 10pt;" data-mce-style="font-size: 10pt;">Sándor Juhász</b></small></span></small><br style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"></div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><span face="Verdana" style="font-size: 10pt; font-family: Verdana;" data-mce-style="font-size: 10pt; font-family: Verdana;"><span color="#666666" style="font-size: 10pt; color: #666666;" data-mce-style="font-size: 10pt; color: #666666;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;">System Administrator</small></span><br style="font-size: 10pt;" data-mce-style="font-size: 10pt;"></span><span color="#fca311" style="font-size: 10pt; color: #fca311;" data-mce-style="font-size: 10pt; color: #fca311;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><span face="Verdana" style="font-size: 10pt; font-family: Verdana;" data-mce-style="font-size: 10pt; font-family: Verdana;"><b style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><big style="font-size: 10pt;" data-mce-style="font-size: 10pt;">ChemAxon</big></b></span></small></small></span><span face="Verdana" style="font-size: 10pt; font-family: Verdana;" data-mce-style="font-size: 10pt; font-family: Verdana;"><span color="#fca311" style="font-size: 10pt; color: #fca311;" data-mce-style="font-size: 10pt; color: #fca311;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> <b style="font-size: 10pt;" data-mce-style="font-size: 10pt;">Ltd</b>.</small></span><br style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><small style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><span color="#666666" style="font-size: 10pt; color: #666666;" data-mce-style="font-size: 10pt; color: #666666;"></span></small></span></small></div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><span style="color: rgb(102, 102, 102); font-size: 10pt; font-family: Verdana;">Building Hx, GraphiSoft Park, Záhony utca 7, Budapest, Hungary, H-1031</span></div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;" data-mce-style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><span style="color: rgb(102, 102, 102); font-size: 10pt; font-family: Verdana;"><span style="color: #666666; font-family: Verdana; font-size: 13px; background-color: #fdfdfd;" data-mce-style="color: #666666; font-family: Verdana; font-size: 13px; background-color: #fdfdfd;">Cell: +36704258964</span></span></div></div><br><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>From: </b>"Sandor Juhasz" <sjuhasz@chemaxon.com><br><b>To: </b>"Alexander Bokovoy" <abokovoy@redhat.com><br><b>Cc: </b>freeipa-users@redhat.com<br><b>Sent: </b>Thursday, January 19, 2017 3:31:58 PM<br><b>Subject: </b>Re: [Freeipa-users] modify schema - add group email and display attribute<br></div><br><div data-marker="__QUOTED_TEXT__"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Most probably i don't. At least i have never created one, neither did this http://www.freeipa.org/images/5/5b/FreeIPA33-extending-freeipa.pdf</div><div>refer anything like that.</div><br><div>How do i do it?</div><br><div><div><small style="font-size: 10pt; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><span style="font-size: 10pt; color: #077179; font-family: Verdana;"><small style="font-size: 10pt;"><b style="font-size: 10pt;">Sándor Juhász</b></small></span></small><br style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"></div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><small style="font-size: 10pt;"><span style="font-size: 10pt; font-family: Verdana;"><span style="font-size: 10pt; color: #666666;"><small style="font-size: 10pt;">System Administrator</small></span><br style="font-size: 10pt;"></span><span style="font-size: 10pt; color: #fca311;"><small style="font-size: 10pt;"><small style="font-size: 10pt;"><span style="font-size: 10pt; font-family: Verdana;"><b style="font-size: 10pt;"><big style="font-size: 10pt;">ChemAxon</big></b></span></small></small></span><span style="font-size: 10pt; font-family: Verdana;"><span style="font-size: 10pt; color: #fca311;"><small style="font-size: 10pt;"> <b style="font-size: 10pt;">Ltd</b>.</small></span><br style="font-size: 10pt;"><small style="font-size: 10pt;"><span style="font-size: 10pt; color: #666666;"></span></small></span></small></div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><span style="color: #666666; font-size: 10pt; font-family: Verdana;">Building Hx, GraphiSoft Park, Záhony utca 7, Budapest, Hungary, H-1031</span></div><div style="font-size: 13px; font-family: 'Segoe UI', 'Lucida Sans', sans-serif; background-color: #fdfdfd;"><span style="color: #666666; font-size: 10pt; font-family: Verdana;"><span style="color: #666666; font-family: Verdana; font-size: 13px; background-color: #fdfdfd;">Cell: +36704258964</span></span></div></div><br><hr id="zwchr"><div><b>From: </b>"Alexander Bokovoy" <abokovoy@redhat.com><br><b>To: </b>"Sandor Juhasz" <sjuhasz@chemaxon.com><br><b>Cc: </b>freeipa-users@redhat.com<br><b>Sent: </b>Thursday, January 19, 2017 3:22:34 PM<br><b>Subject: </b>Re: [Freeipa-users] modify schema - add group email and display attribute<br></div><br><div>On to, 19 tammi 2017, Sandor Juhasz wrote:<br>>One more issue. Service user cannot see the new attribute. It does see the objectclass.<br>><br>>ldif:<br>>dn: cn=schema<br>>changetype: modify<br>>add: objectclasses<br>>objectclasses: ( 1.3.6.1.4.1.49232.1.1<br>>NAME 'groupMail'<br>>SUP top<br>>STRUCTURAL<br>>MAY ( mail $ displayname )<br>>X-ORIGIN 'Extending FreeIPA' )<br>><br>>Service user:<br>>uid=googlesync,cn=sysaccounts,cn=etc,dc=test,dc=tld<br>><br>>Regular user:<br>>uid=admin,cn=users,cn=accounts,dc=test,dc=tld<br>admin is not a regular user.<br><br>>They both see objectclass=groupmail, but uid=googlesync does not birng back<br>>mail and displyaname, while using ldapsearch.<br>Do you have an ACI that allows to actually see the attribute?<br><br>-- <br>/ Alexander Bokovoy<br></div></div><br>-- <br>Manage your subscription for the Freeipa-users mailing list:<br>https://www.redhat.com/mailman/listinfo/freeipa-users<br>Go to http://freeipa.org for more info on the project<br></div></div></body></html>