https://bugs.openldap.org/show_bug.cgi?id=9506
Issue ID: 9506 Summary: dynlist: member expansion when member attribute not requested Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: overlays Assignee: bugs@openldap.org Reporter: quanah@openldap.org Target Milestone: ---
When configured to do dynamic "member" expansion, i.e.:
overlay dynlist dynlist-attrset groupOfURLs memberURL member
Any query against an object that would trigger this expansion will incur a penalty while dynlist does the expansion work even if there was no request for the member attribute.
Currently that can be worked around by specifying the manageDSAit control when doing a search on the object, but this may not be feasible for some client applications and additionally other directory servers do not do this expansion for their dynamic group implementations unless the underlying configured attribute is explicitly requested.
We've already implemented this in dynlist for the memberOfAD case, we should do it here as well.