It is valid but why is it useful ?
I would expect that this attribute takes eq/sub/order from the syntax (IA5). Is it a safety setting or did you notice it was not using IA5substring ?

@tbordaz If you look at 60nis.ldif it defines the substring rule, so I wanted to keep that as compatability.

This change is valid but before pushing it we need to have a clear understanding how we will fix the problem found with nisDomain from rfc2307/compat. This PR is somehow blocked by rfc2307/compat status.

I don't actually think there has been any evidence yet that FreeIPA conflicts with this schema change - every issue has been development only related to not cleaning the rfc2307.ldif when the rfc2307compat.ldif goes in the same directory. So my vote is we make this change, and then if we have to make compat optional (which would be the worst outcome and defeat the whole point ....) then we make it so that 2307compat is a requirement of 60nis.ldif.

IMO we merge this, and if there is actually a real issue in FreeIPA, then they need to resolve that themself, and if that's not possible, we can revert and make this optional and put ryc2307.ldif as the default. Is that reasonable?

Please see discussion on https://pagure.io/389-ds-base/issue/50933 (also regarding FreeIPA). The issues are really everywhere, not just FreeIPA.

I have an alternate approach to this.

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This pull request has been cloned to Github as issue and is available here:
- https://github.com/389ds/389-ds-base/issues/4062

If you want to continue to work on the PR, please navigate to the github issue,
download the patch from the attachments and file a new pull request.

Thank you for understanding. We apologize for all inconvenience.