Thomas, To create custom attributes in Gluu 3.1.2 using OpenDJ, you have to modify the `/opt/opendj/config/schema/77-attributes.ldif` file. For example: ``` [root@c4 schema]# cat 77-customAttributes.ldif dn: cn=schema objectClass: top objectClass: ldapSubentry objectClass: subschema cn: schema attributeTypes: ( 1.3.6.1.4.1.48710.1.3.61 NAME 'xxxx' DESC 'Reference the dn of a person.' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 X-ORIGIN 'Gluu created attribute' ) attributeTypes: ( 1.3.6.1.4.1.48710.1.3.62 NAME 'iiiii' DESC 'Reference the dn of a person.' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 X-ORIGIN 'Gluu created attribute' ) attributeTypes: ( 1.3.6.1.4.1.48710.1.3.63 NAME 'test' DESC 'Reference the dn of a person.' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 X-ORIGIN 'Gluu created attribute' ) objectClasses: ( 1.3.6.1.4.1.48710.1.4.101 NAME 'gluuCustomPerson' SUP ( top ) AUXILIARY MAY ( telephoneNumber $ xxxx $ mobile $ test $ carLicense $ iiiii $ facsimileTelephoneNumber $ departmentNumber $ employeeType $ cn $ st $ manager $ street $ postOfficeBox $ employeeNumber $ preferredDeliveryMethod $ roomNumber $ secretary $ homePostalAddress $ l $ postalCode $ description $ title ) X-ORIGIN 'Gluu - Custom persom objectclass' ) ``` Then restarting openDJ and adding the attribute in oxTrust.

Looks like the docs are updated! Thanks so much for the answer and the updated docs. I'll give it a shot and let you know if I run into any troubles.

I do have a question: How do I know what the objectClasses number should look like? In your example you have listed 1.3.6.1.4.1.48710.1.3.62. I don't want to just make up some number as we don't want it to conflict or anything. Can I just take the existing number and increment it? Finally, the existing 77-customAttributes.ldif file does not have any attributeTypes listed. Do I just need to inject those above the existing objectClasses: section?

Thomas, Here's some documentation on OpenDJ schema: https://backstage.forgerock.com/docs/opendj/2.6/admin-guide/#about-schema ``` How do I know what the objectClasses number should look like? In your example you have listed 1.3.6.1.4.1.48710.1.3.62. I don't want to just make up some number as we don't want it to conflict or anything. ``` You can generally check inside the schema that there is no number match that same schema before you add it. The other schema inside Gluu also follow some numbering logic. See: ``` [root@c7 schema]# grep -ir objectClasses 00-core.ldif:attributeTypes: ( 2.5.21.6 NAME 'objectClasses' 00-core.ldif:objectClasses: ( 2.5.6.0 NAME 'top' ABSTRACT MUST objectClass 00-core.ldif:objectClasses: ( 2.5.6.1 NAME 'alias' SUP top STRUCTURAL MUST aliasedObjectName 00-core.ldif:objectClasses: ( 2.5.6.2 NAME 'country' SUP top STRUCTURAL MUST c 00-core.ldif:objectClasses: ( 2.5.6.3 NAME 'locality' SUP top STRUCTURAL 00-core.ldif:objectClasses: ( 2.5.6.4 NAME 'organization' SUP top STRUCTURAL MUST o 00-core.ldif:objectClasses: ( 2.5.6.5 NAME 'organizationalUnit' SUP top STRUCTURAL MUST ou 00-core.ldif:objectClasses: ( 2.5.6.6 NAME 'person' SUP top STRUCTURAL MUST ( sn $ cn ) ... <snip> ... 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.37 NAME 'oxCustomScript' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.38 NAME 'oxDeviceRegistration' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.39 NAME 'oxU2fRequest' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.40 NAME 'oxMetric' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.41 NAME 'oxClientAuthorizations' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.42 NAME 'oxSectorIdentifier' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.43 NAME 'oxAsimbaConfiguration' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.44 NAME 'oxAsimbaSelector' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.45 NAME 'oxAsimbaIDP' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.46 NAME 'oxAsimbaRequestorPool' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.47 NAME 'oxAsimbaSPRequestor' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.48 NAME 'oxPassportConfiguration' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.49 NAME 'oxShibbolethCASProtocolConfiguration' 101-ox.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.50 NAME 'oxAuthUmaPCT' 77-customAttributes.ldif:objectClasses: ( 1.3.6.1.4.1.48710.1.4.101 NAME 'gluuCustomPerson' ``` This will show you all of the oid's for the schema in /opt/opendj/config/schema. As you can see they follow some numbering order after the initial numbering portion `1.3.6.1.4.1.48710.1.4.x`. I would pick a numbering format and check it against your current schema and also Google to see if it's not already taken: ``` [root@c7 schema]# grep -ir 1.3.6.1.4.1.42.2.27.5.2.1 05-solaris.ldif:objectClasses: ( 1.3.6.1.4.1.42.2.27.5.2.1 NAME 'SolarisProject' ``` and go from there. ``` Finally, the existing 77-customAttributes.ldif file does not have any attributeTypes listed. Do I just need to inject those above the existing objectClasses: section? ``` Yes, you need to add attribute types there with proper spacing and no line spacing between attributes or object classes. If you're having issues you can track the /opt/opendj/logs/errors for schema errors.

Thanks for the help. It's all working now. Before closing this ticket, I have a final question: Are there plans to add the ability to create custom attributes back into the GUI? It used to be there so it's somewhat disappointing that the feature is gone now, especially since in the current state, you must create the custom attribute in the text configuration file, but the interaction with the GUI is still required to "Register" the new attribute. Thanks! Thomas

Hi Thomas, Yes, we will add ( fix, actually) adding custom attribute from GUI ( oxTrust ).