On Wed, Mar 27, 2019 at 04:39:14PM +0000, clement.oudot@worteks.com wrote:

Seems it is because memberof try to add the new value before deleting the old one. As the values are the same when ignoring the case, the modification is rejected.

I would say that doing the LDAP_SLIST_REMOVE before the LDAP_SLIST_INSERT_HEAD in memberof.c should be enough but I don't know if this is safe.

Alternatively checking that the new DN is not equivalent to the old and if so, noop it? That's just been uploaded to https://github.com/mistotebe/openldap/tree/its9000

Regards,