title: openLDAP: login with userPrincipalName
body: <p>I have set up an <code>openLdap</code> server instance.</p>
  
  <p>Login for the time being requires providing as username the user's <code>dn</code>, e.g.</p>
  
  <p><code>"cn=151test,cn=somecn,ou=someou,dc=mydomain,dc=com"</code></p>
  
  <p>How is it possible to enable login with <code>userPrincipalName</code> in the form of</p>
  
  <p><code>151test@mydomain.com</code> ?</p>
  
  <p><strong>edit</strong>: it seems that <code>userPrincipalName</code> is an attribute of <code>user</code> <code>objectClass</code>, available to <strong>Active Directory</strong> but not available out of the box to the default schema used by <code>openLDAP</code>.</p>
  
  <p>So the question more or less becomes: </p>
  
  <blockquote>
    <p>how to use (import) an AD-compliant schema by (to) openLDAP <strong>AND</strong> enable login with <code>userPrincipalName</code> as username</p>
  </blockquote>