Full_Name: John Alex.
OS: FreeBSD 9.3
Submission from: (NULL) (18.104.22.168)
I have a consumer configured with slapo-memberof and exattrs=memberof in order
to keep track of group memberships locally as suggested in the manpages. This
works ok when adding/deleting users to groups, but when a user entry containing
"memberOf" values is modified, those values are deleted in the consumer.
According to ITS#7400, exattrs=memberOf is necessary to avoid getting this
attribute from the provider. However, it was suggested to me to remove
"memberOf" from exattrs, which I did and now everything seems to work fine.
In any case, even if exattrs=memberof is not needed anymore, it should not have
any effect to the local slapo-memberof operations.
See also: http://www.openldap.org/lists/openldap-technical/201505/msg00124.html