Replace slapo memberOf with slapo dyngroup
Add new schema files (Symas OpenLDAP versions below 2.4.45)
Add: “/opt/symas/etc/openldap/schema/memberof.schema”
attributetype ( 1.2.840.113556.1.2.102
NAME 'memberOf'
DESC 'Group that the entry belongs to'
EQUALITY distinguishedNameMatch
SYNTAX '1.3.6.1.4.1.1466.115.121.1.12'
)
Add: “/opt/symas/etc/openldap/schema/dyngroup-memberof.schema”
objectclass ( 1.3.6.1.4.1.42.2.27.8.2.1
NAME 'memberOfOC'
SUP top
AUXILIARY
MUST ( memberOf )
)
objectClass ( NetscapeLDAPobjectClass:33
NAME 'groupOfURLs'
SUP top AUXILIARY
MUST cn
MAY ( memberURL $ businessCategory $ description $ o $ ou $
owner $ seeAlso )
)
Example configuration: Note: Remove the memberOf module load and memberOf overlay configurations
....
include "/opt/symas/etc/openldap/schema/memberof.schema"
include "/opt/symas/etc/openldap/schema/dyngroup-memberof.schema"
....
moduleload dynlist.la
....
database mdb
....
index memberOf
...
overlay dynlist
dynlist-attrset groupOfUrls memberURL member
User Creation
All user entries must have “groupOfURLs” as an objectClass and must have a memberURL attribute in the following format:
memberURL: ldap:///<suffix>??sub?(member=<user DN>)
Example:
dn: cn=Marice McCaugherty,ou=Product Testing,dc=example,dc=com
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: groupOfURLs
memberURL: ldap:///dc=example,dc=com??sub?(member=cn=Marice McCaugherty,ou=Product Testing,dc=example,dc=com)
memberOf: cn=testgroup,ou=Group,dc=example,dc=com
memberOf: cn=alttestgroup,ou=Group,dc=example,dc=com