Thank you for the input!

Ive been researching it a bit. As far as I understand, dynlist “allows for expansion of dynamic groups and more” (from the man). Also, I'm assuming that dynlist also works well with MMR syncrepl, yes? (Since memberof didnt)

I only have static groups.
Googling around showed that you can also use it against static groups…if I understood it correctly.

Would this overlay config help me for expanding against static groups using rfc2307bis schema?

dn: olcOverlay=dynlist,olcDatabase=mdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcDynListConfig
olcOverlay: dynlist
olcDynListAttrSet: member

Thank you!

On Aug 27, 2021, 8:39 PM -0400, Quanah Gibson-Mount <quanah@symas.com>, wrote:

--On Friday, August 27, 2021 8:10 PM -0400 Dave Macias <davama@gmail.com>
wrote:

So i rebuild but without memberof module/overlay

From the slapo-memberof(5) man page for OpenLDAP 2.5:

Note that this overlay is deprecated and support will be dropped
in
future OpenLDAP releases. Installations should use the dynlist
overlay
instead. Using this overlay in a replicated environment is
especially
discouraged.

The point was you should be using dynlist rather than memberOf.

Regards,
Quanah

--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>