The ldap_server role takes care of setting-up/loading a number of schemas into the LDAP directory in order to make it possible to fully cover requirements on applications that rely on the LDAP directory.

One requirement that popped up recently was the ability to provide country name/country code for the addresses stored in an LDAP-based address book. Unfortunately, no existing official schemas that are loaded up seem to support such a feature.

It would be useful if the role would try to provide access to an auxiliary object class that would make it possible to specify either the two-letter country code or a free-form country name.

The following should be done:

• Update the ldap_server role.
  • Deploy and load additional schema file with an auxiliary object class.
  • Object class should allow for specifying either the c/countryName (from the core schema) or co/friendlyCountryName (from the cosine schema) attributes.
  • Both attributes should be optional.
• Update role reference documentation.
• Update usage instructions.
• Update release notes.