Some LDAP objects (including certificate profiles and ID overrides) cannot be renamed; the command offers the --rename option but this case is checked in command logic.
It would be better to add an attribute to LDAPObject to signal that rename is not available for those objects, which would result in the `rename' option not being added, and allowing the validation logic to be removed.
Metadata Update from @ftweedal: - Issue assigned to someone - Issue set to the milestone: FreeIPA 4.5 backlog
Login to comment on this ticket.