[Freeipa-users] Doubt on FreeIPA LDAP extensibility

[Simo Sorce]

On Sat, 2012-03-17 at 11:12 +0100, Marco Pizzoli wrote:
> Hi guys,
> 
> I extended my set of LDAP objectClasses associated to users by adding
> my new objectClass to my cn=ipaConfig LDAP entry, the
> ipaUserObjectClasses attribute.
> Then, I created a new user with the web ui and I see the new
> objectClass associated with that user, but as structural instead of
> auxiliary. I don't know why, could you help me?
> 
> Same thing happened for my groups. I added 3 objectClasses and now I
> see all of them as structural. I would understand an answer: all
> objectClasses eventually result as structural, but so why, for
> example, the ipaObject is still an auxiliary objectClass?

The objectClass type depends on the schema. It is not something that
changes after you assign it to an object.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York