Problem
If you want to change the first name and surname via self-service you get the following error message:
“The attributes could not be saved: Access denied”
You have configured the ucr f.e. like this:
self-service/ldap_attributes: jpegPhoto,mail,telephoneNumber,roomNumber,departmentNumber,st,homePhone,mobile,homePostalAddress,givenName,sn
self-service/udm_attributes: jpegPhoto,e-mail,phone,roomnumber,departmentNumber,country,homeTelephoneNumber,mobileTelephoneNumber,homePostalAddress,firstname,lastname
Solution
You have to extend the attributes like the following command:
ucr set self-service/ldap_attributes='jpegPhoto,mail,telephoneNumber,roomNumber,departmentNumber,st,homePhone,mobile,homePostalAddress,givenName,sn,gecos,cn,displayName'
Hint:
Changing UDM:firstname also changes LDAP:gecos,cn,displayName
Changing UDM:lastname also changes LDAP:gecos,cn,displayName