On Tue, Aug 04, 2020 at 12:20:35PM -0700, Quanah Gibson-Mount wrote:
There's been significant work for OpenLDAP 2.5 to allow slapo-dynlist to be an alternative to slapo-memberOf in a replicated environment as it does not suffer from the replication related issues.
Hmm, I've been using dynlist for the memberOf attribute with 2.4 ever since you got tired of me reporting weird syncrepl bugs with the slapo-memberOf module and updated the documentation to say it wasn't supported anymore ;). What changes will there be in 2.5 to make it better? Other than not being able to search on memberOf anymore (and the couple of cutover issues that resulting in when a couple apps I was unaware of were doing that 8-/) it's been working well...