Note that the formal description [RFC2256] of the SN attribute type is: ( 2.5.4.4 NAME 'sn' SUP name )
> > No server is required to recognize this attribute type by any > name other than 'sn'. A client which asks for 'surname' is > simply broken and won't interoperate broadly.
So why adding alias 'surname' at all?
Or, to put it another way, slapd(8) is being liberal in accepting 'surname' as an alias for 'sn', but strict in returning the proper name for the attribute type.
Ciao, Michael.