LdapProvisioner eduPersonAffiliation

If the eduPerson objectclass is enabled in the LDAP Provisioner, and eduPersonAffiliation is enabled, OpenLDAP throws an attribute type error. However, if eduPersonAffiliation is disabled but another attribute (eg eduPersonPrincipalName) is enabled, the record provisions. (The eduPerson objectclass is confirmed in the cn=config configuration on the server, and both attributes are correctly defined.)

The OpenLDAP in question is using the TAP OpenLDAP container and what appears to be a correct ldif file for eduPerson.