[Freeipa-devel] ipaMaxUsernameLength

Rob Crittenden rcritten at redhat.com
Mon Dec 15 18:25:35 UTC 2008


Joey Boggs wrote:
> This script which used to work on ipa version 1.0 is now running into 
> issues on 1.1, has the dn: changed for this modification, I can't seem 
> to locate any documentation for ipaMaxUsernameLength
> 
> ------------------
> ldapmodify -h management.priv.ovirt.org -p 389 -Y GSSAPI <<LDAP
> dn: cn=ipaConfig,cn=etc,dc=priv,dc=ovirt,dc=org
> changetype: modify
> replace: ipaMaxUsernameLength
> ipaMaxUsernameLength: 12
> LDAP
> ------------------
> 
> 
> [root at management ~]# /bin/sh 
> /usr/share/ace/modules/ovirt/files/ldapuserlength.sh
> SASL/GSSAPI authentication started
> SASL username: admin at PASSWORD
> SASL SSF: 56
> SASL data security layer installed.
> modifying entry "cn=ipaConfig,cn=etc,dc=priv,dc=ovirt,dc=org"
> ldap_modify: No such object (32)

Strange, that should work fine. IPA now provides a command-line program 
that can do this:

% ipa-defaultoptions --maxusername=12

rob




More information about the Freeipa-devel mailing list