Thanks for the report. This is a known bug in 2.3 and was fixed in OpenLDAP 2.4.4. The fix will not be backported to 2.3. This ITS will be closed.
patrick.ni@strangeloopnetworks.com wrote:
Full_Name: Patrick Ni Version: 2.3.30-5 OS: Linux version 2.6.18-4-486 (Debian 2.6.18.dfsg.1-12etch2) (dannf@debian.org) (gcc version 4.1.2 20061115 (prerelease) (Debian 4.1.1-21)) URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (76.77.66.100)
Hello,
I have a group entry for myself "patrick" in the LDAP database as follows:
dn: cn=patrick,ou=Group,dc=strangeloop,dc=net objectClass: posixGroup objectClass: top cn: patrick userPassword:: e1NTSEF9eA== gidNumber: 500 memberUid: patrick
Recently, I realized I could add my 2nd openLDAP account "dn:uid=patrick2,ou=Accounts,dc=strangeloop,dc=net" into my group "patrick" using the following LDIF file:
ldap1:~/ldap# more group2_patrick.ldif dn: cn=patrick,ou=Group,dc=strangeloop,dc=net changetype:modify add:membership memberUid:patrick2
This should not have succeeded because the "add:membership" line is wrong; It should have been "add:memberUid".
thanks -Patrick