[...]
Since you are already using python, you could more easily just use
lib389 directly rather
than subprocess to dsconf btw:
from lib389 import DirSrv
import logging
[...]
I leave just a note on this...
Really at the moment I prefer trust on dsconf. I see that the lib389 documentation is
still work in progress.
Or it's not clear for me where to find the full documentation. For instance, here
https://lib389.readthedocs.io/en/latest/plugin.html
it's not clear how to configure all uniqueness plugin parameters.
A more complete documentation seems the following:
https://spichugi.fedorapeople.org/html/plugin.html
but for example it still lacks on some configurations about AttributeUniquenessPlugin,
such as "--subtree-entries-oc" which dsconf manages fine.
Another way to proceed is to manage all attributes and dn directly with LDAP modify
operations, but this would bypass lib389...
Thank you again for all the hints
Kind Regards
Marco