Hi Theirry,

Many thanks!   I'll try this.

Cheers,

On 8/6/20 8:04 AM, thierry bordaz wrote:
Hi,

EmployeeID looks to be a direct mapping of EmployeeNumber. EmployeeNumber is defined in rfc2798 and delivered as a standard definition in /share/dirsrv/schema/06inetorgperson.ldif. Even if defining EmployeeId as alias of EmployeeNumber is possible I would not recommend to update a standard definition. Instead you may try to add EmployeeID in the instance specific custom definitions "/etc/dirsrv/slapd-<instance>/schema/99user.ldif". I think those changes should be done without the console.

If employeeiD is identical to employeeNumber and the users are already provisionned, I am afraid the easier way is to alias the standard definition. Else you could update those entries adding employeeid based on employeeNumber value. It also exists the possibility to make it a virtual attribute. Using a combinaison of managed entry [1] and indirect cos [2]. Or to use rewriters (filter rewrite and computed attributes).

[1] https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/administration_guide/using-managed-entries [2] https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/administration_guide/advanced_entry_management-assigning_class_of_service#About_CoS-How_an_Indirect_CoS_Works

regards
theirry

On 8/6/20 3:11 PM, Janet Houser wrote:
Hi Folks,

I'm working to set up a PingFederate server to communicate with Apps at a sister location.  I'm told that the software needs to send the "employeeID" in order to
authenticate with the offsite server.

Under the Directory Server --> Schema -->  Tab Attributes, DS-389 has the attribute "employeeNumber" which I can add to a user's LDAP information.   There doesn't seem to be a way to change the name on this page, and when I tried adding a "User Defined Attribute", it wouldn't show up under "Advanced" for a user.

Is there a way to add this field to all users and change the name to "employeeID"?

I'm searching, but I haven't found a way to do this via the 389-console.

Thanks in advance!

j
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

--
J.L. Houser, Ph.D.
Senior Systems Administrator
National Solar Observatory
3665 Discovery Drive
Boulder, CO 80303
Office Phone:  (303) 7357357

"Never give me root access....."

IT Motto:   "Do or do not, there is no try"
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

Reply via email to