When raising an error about a required attribute, use cli_name not name.

name is an LDAP attribute and may not be easily identifiable (e.g. sn).

ipalib/parameters.py

@@ -703,7 +703,7 @@ class Param(ReadOnly):
         """
         if value is None:
             if self.required:
-                raise RequirementError(name=self.name)
+                raise RequirementError(name=self.cli_name)
             return
         if self.query:
             return