By: Sakit Atakishiyev user 06 Jun 2017 at 8:42 a.m. CDT

11 Responses
Sakit Atakishiyev gravatar
I added a custom attribute to LDAP and register on Gluu. But when I try to update this attribute I got the below error ```` Caused by: com.unboundid.ldap.sdk.LDAPException: attribute 'certificate' not allowed ````

By Aliaksandr Samuseu staff 06 Jun 2017 at 9:34 a.m. CDT

Aliaksandr Samuseu gravatar
Hi, Sakit. Your details are very scarce. Please share your updated schema files, screenshot of that attribute's configuration (or, even better, LDIF dump of its metadata from LDAP), full Java error traces from logs (not just a fragment of it) etc.

By Sakit Atakishiyev user 06 Jun 2017 at 9:51 a.m. CDT

Sakit Atakishiyev gravatar
I updated with screenshots and log [oxauth](https://drive.google.com/file/d/0B0k0w2ZRcqm_eUh3VGw3WkpUa1U/view?usp=sharing), [pict1](https://drive.google.com/file/d/0B0k0w2ZRcqm_NXRLV2M3VnZ0UjQ/view?usp=sharing),[pict2](https://drive.google.com/file/d/0B0k0w2ZRcqm_V0h3YVVNbmhYX1U/view?usp=sharing), [pict3](https://drive.google.com/file/d/0B0k0w2ZRcqm_ZG1LdHNCcDdGY2s/view?usp=sharing), [pict4](https://drive.google.com/file/d/0B0k0w2ZRcqm_Tmd5M1RxTlZmVkk/view?usp=sharing) if this info not enought please let me to provide more

By Mohib Zico Account Admin 06 Jun 2017 at 10:29 a.m. CDT

Mohib Zico gravatar
Hi Sakit, How you are trying to use this attribute? i.e. during authentication? as scopes? When you are getting this error exactly? [ I know you mentioned... when you are trying to push some value inside this attribute but your log showing a authentication step. ]

By Mohib Zico Account Admin 06 Jun 2017 at 10:30 a.m. CDT

Mohib Zico gravatar
Another question: What kind of value you are trying to insert in this attribute? Please share example as well if you can.

By Sakit Atakishiyev user 06 Jun 2017 at 10:33 a.m. CDT

Sakit Atakishiyev gravatar
yes mohib I tried to set some `base64` encoded value to this attribute in authentication step. I can set the same value to any existing attribute. But can not set to my custom attribute

By Mohib Zico Account Admin 06 Jun 2017 at 10:42 a.m. CDT

Mohib Zico gravatar
Thanks for clarification, Sakit. Can you please share a value? We will try to reproduce it here locally.

By Sakit Atakishiyev user 06 Jun 2017 at 10:46 a.m. CDT

Sakit Atakishiyev gravatar
you can set any value. I don't think that this because of the value. Because I can set the same value to different attribute This is the my value: `e+KAnHVzZXLigJ064oCddGVzdOKAnSzigJ1waG9uZeKAnTrigJ0xMjM0NTY3ODkifQ==`

By Mohib Zico Account Admin 06 Jun 2017 at 10:49 a.m. CDT

Mohib Zico gravatar
Thanks, assigned to QA team.

By Sahil Arora user 20 Jun 2017 at 11:18 p.m. CDT

Sahil Arora gravatar
I'm not able to reproduce on my system. I was able to create custom attribute "certificate", and was able to register/add/update user with this attribute value `e+KAnHVzZXLigJ064oCddGVzdOKAnSzigJ1waG9uZeKAnTrigJ0xMjM0NTY3ODkifQ==`. Can you please `/opt/gluu/schema/openldap/custom.schema` file to check further. Thanks

By Sakit Atakishiyev user 21 Jun 2017 at 12:09 a.m. CDT

Sakit Atakishiyev gravatar
Hi Sahil. You said that you can set but on which script? In `person authentication` or `user registration`? I can also set this value to my custom attribute but only on any `update registration` scripts. On `authentication` scripts could not set or add.

By Sakit Atakishiyev user 21 Jun 2017 at 12:13 a.m. CDT

Sakit Atakishiyev gravatar
This is the my `custom.schema` ```` attributetype ( 1.3.6.1.4.1.48710.1.3.1001 NAME 'myCustomAttr1' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'Gluu - dynamic registration custom attribute' ) attributetype ( 1.3.6.1.4.1.48710.1.3.1002 NAME 'myCustomAttr2' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'Gluu - dynamic registration custom attribute' ) attributetype ( 1.3.6.1.4.1.48710.1.3.1003 NAME 'certificate' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'Gluu - dynamic registration custom attribute' ) attributetype ( 1.3.6.1.4.1.48710.1.3.1004 NAME 'fin' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'Gluu - dynamic registration custom attribute' ) objectclass ( 1.3.6.1.4.1.48710.1.4.101 NAME 'gluuCustomPerson' SUP ( top ) AUXILIARY MAY ( telephoneNumber $ mobile $ certificate $ fin ) X-ORIGIN 'Gluu - Custom persom objectclass' ) objectclass ( 1.3.6.1.4.1.48710.1.4.102 NAME 'oxAuthClientCustomAttributes' SUP ( top ) AUXILIARY MAY ( myCustomAttr1 $ myCustomAttr2 ) X-ORIGIN 'Gluu - Custom client objectclass' ) ````