// Only persons have (normally) all these extra attributes.
// A CA might have them if you don't use the default objectClass, but we don't
// handle that case.
if (person) {
// First get the easy ones where LDAP and EJBCA spelling is the same
attributeSet.addAll(getAttributesFromDN(dn, MATCHINGPERSONALATTRIBUTES));
// sn means surname in LDAP, and is required for persons
String cn = CertTools.getPartFromDN(dn, "CN");
String sn = CertTools.getPartFromDN(dn, "SURNAME");
if ( (sn == null) && (cn != null) ) {
// Only construct this if we are the standard object class