On Sun, 2008-01-13 at 11:43 +0100, Michael Ströder wrote:
Pierangelo Masarati wrote:
> Michael Ströder wrote:
>> Pierangelo Masarati wrote:
>>> Michael Ströder wrote:
>>>
>>>>> Yes, slapo-memberof(5) does not consider the possibility of a
subtree
>>>>> rename, and thus takes no care of it.
>>>> Would deploying slapo-refint be of help here?
>>> Could be. Did you try, by chance?
>> Hmm, does not work for me. Not sure about current state of HEAD and
>> order of my overlay config. I also wonder about parameter memberof-refint.
>> ------------------- snip -------------------
>> Excerpt of slapd.conf:
>>
>> overlay memberof
>> memberof-refint true
>>
>> # Referential integrity checking
>> overlay refint
>> refint_attributes member manager owner seeAlso roleOccupant
>> refint_nothing cn=dummy
>
> Probably you should have also listed "memberOf" among the refint attrs;
Ouch! It was late yesterday...
Yes, it works as expected with memberOf also being handled by
slapo-refint. But now I really wonder how it scales if there are
thousands of members in a group which is renamed.
I can't seem to make it work for me, with the config file as attached.
I'm doing the subtree rename of
CN=ldaptestcontainer,DC=samba,DC=example,DC=com to
CN=ldaptestcontainer2,DC=samba,DC=example,DC=com
But i still see:
# record 55
dn: CN=ldaptestgroup2,CN=Users,DC=samba,DC=example,DC=com
member: cn=ldaptestuser,cn=useRs,dc=samba,dc=example,dc=com
member: cn=ldaptestcomputer,cn=computers,dc=samba,dc=example,dc=com
member: cn=ldaptestuser2,cn=users,dc=samba,dc=example,dc=com
*** member:
cn=ldaptestuser4,cn=ldaptestcontainer,dc=samba,dc=example,dc=com
slapd.conf and memberof.conf are attached.
Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team
http://samba.org
Samba Developer, Red Hat Inc.
http://redhat.com