Description Philipp Hahn 2021-01-15 14:11:09 CET

On https://nissedal.knut.univention.de/univention/self-service/#page=profiledata you can select your "Land", e.g. "Deutschland".

This is stored in LDAP as "st: DE", which is wrong as "ST" is short for "stateOrProvinceName", e.g. "Bundesland Bremen":
> # ldapsearch -xLLLo ldif-wrap=no -b cn=Subschema -s base   attributeTypes -E mv='(attributeTypes=st)'
> dn: cn=Subschema
> attributeTypes: ( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) DESC 'RFC2256: state or province which this object resides in' SUP name )

The correct attribute would be "C", which is short for "countryName":
> # ldapsearch -xLLLo ldif-wrap=no -b cn=Subschema -s base   attributeTypes -E mv='(attributeTypes=c)'
> dn: cn=Subschema
> attributeTypes: ( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC4519: two-letter ISO-3166 country code' SUP name SYNTAX 1.3.6.1.4.1.1466.115.121.1.11 SINGLE-VALUE

This is not a bug in Self-Service, but in UDM users/user:

> # udm users/user list --filter uid=phahn | grep -e country -e ^DN
> DN: uid=phahn,cn=self registered users,dc=phahn,dc=dev
>   country: DE

> # univention-ldapsearch -LLLo ldif-wrap=no uid=phahn st c
> dn: uid=phahn,cn=self registered users,dc=phahn,dc=dev
> st: DE

In UMC/UDM "Konto" → "Geschäftlich" → "Land"

management/univention-directory-manager-modules/modules/univention/admin/handlers/users/user.py:1187
> mapping.register('country', 'st', None, univention.admin.mapping.ListToString)