4.4. Modifying user object classes in the IdM CLI

Prerequisites

• You have enabled the brace expansion feature:

  # set -o braceexpand

• You are logged in as the IdM administrator.

Procedure

• Use the ipa config-mod command to modify the current schema. For example, to add top and mailRecipient object classes to the future user entries:

  [bjensen@server ~]$ ipa config-mod --userobjectclasses={person,organizationalperson,inetorgperson,inetuser,posixaccount,krbprincipalaux,krbticketpolicyaux,ipaobject,ipasshuser,mepOriginEntry,top,mailRecipient}

  The command adds all the ten user object classes that are native to IdM as well as the two new ones, top and mailRecipient.

  重要

  The information passed with the config-mod command overwrites the previous values. If any user object classes required by IdM are not included, then subsequent attempts to add a user entry will fail with object class violations.

  Alternatively, you can add a user object class by using the ipa config-mod --addattr ipauserobjectclasses=<user object class> command. In this way, you do not risk forgetting a native IdM class in the list. For example, to add the mailRecipient user object class without overwriting the current configuration, enter ipa config-mod --addattr ipauserobjectclasses=mailRecipient. Analogously, to remove only the mailRecipient object class, enter ipa config-mod --delattr ipauserobjectclasses=mailRecipient.