Ok, I think I’m on the path, but still have not reached my destination.

I already have OpenLDAP up and running, but I need to add the memberOf overlay.  From what I’ve read, the slapd.conf is being depricated.  When I did my install, I never used the slapd.conf file and configured all the options LDIF ldapadds (sudo ldapadd -Y EXTERNAL -H ldapi:/// -f base.ldif). 

Would I create a LDIF file with the memberOf configs, and if so, what would that file look like,

Or, should I use the slapd.conf and do a “moduleload    memberof.la” as a global setting?  If I do this, will I overwrite any of my other changes that are not in this file (which may have been configured from the LDIFs)?

From: Radosław Antoniuk [mailto:radek.antoniuk@gmail.com]
Sent: Thursday, January 21, 2010 3:42 AM
To: Todd Reed
Cc: openldap-technical@openldap.org
Subject: Re: memberOf Overlay

On Thu, Jan 21, 2010 at 6:02 AM, Todd Reed <treed@astate.edu> wrote:

I'm a little confused with implementing the memberOf overlay.  I've seen
some articles talk about the slapd.conf file; others are talking about
an ldif file, etc.  Two questions keep coming to my head everytime.

I have an Ubuntu box with OpenLDAP installed via apt-get.  I need to
utilize the memberOf attribute.

1)  Based on my installation method (OpenLDAP from apt-get), what is the
suggested method to use to obtain the memberOf functionality?

2)  Will I need to create an LDIF file for every group I have or create
in the future?  Is there something I could do in the schema to always
include the memberOf in the every user I create for any group?

Hi,

I think that the example in the docs is clear enough if you think it over :)

http://www.openldap.org/doc/admin24/overlays.html#Member%20Of%20Configuration


--
Best regards,
Radek Antoniuk
w: www.radek.org.pl