Hi Alexandre

1) From slapo-memberof:

SLAPO-MEMBEROF(5)                       File Formats Manual                      SLAPO-MEMBEROF(5)

DESCRIPTION
...

      Note that this overlay is deprecated and support will be dropped in future OpenLDAP re‐
      leases. Installations should use the dynlist overlay instead. Using this overlay in a
      replicated environment is especially discouraged.

2) as far as I remember, memberof needs refint module too...

Not sure about refint, but ..

#### memberof
dn: cn=module{0},cn=config
changetype: modify
add: olcModuleLoad
olcModuleLoad: memberof
olcModuleLoad: refint
olcModuleLoad: back_monitor

dn: olcOverlay=memberof,olcDatabase={1}mdb,cn=config
objectClass: olcConfig
objectClass: olcMemberOf
objectClass: olcOverlayConfig
objectClass: top
olcOverlay: memberof
olcMemberOfDangling: ignore
olcMemberOfRefInt: TRUE
olcMemberOfGroupOC: groupOfNames
olcMemberOfMemberAD: member
olcMemberOfMemberOfAD: memberOf

dn: olcOverlay=refint,olcDatabase={1}mdb,cn=config
objectClass: olcConfig
objectClass: olcOverlayConfig
objectClass: olcRefintConfig
objectClass: top
olcOverlay: refint
olcRefintAttribute: memberof
olcRefintAttribute: member
olcRefintAttribute: manager
olcRefintAttribute: owner

Hope it helps you.

Em qua., 7 de ago. de 2024 às 15:10, <awoestmann@intevation.de> escreveu:

Hi everyone,

i am trying to set up a OpenLDAP (2.6.7 in a Ubuntu noble container) with the memberOf Overlay activated. Adding the users and groups seems to work fine but i was not yet able to activate the overlay and query the memberships of a given user.

I am using the following ldif to load the overlay:

dn: cn=module,cn=config
cn: module
objectClass: olcModuleList
olcModuleLoad: memberof
olcModulePath: /usr/lib/ldap

dn: olcOverlay={0}memberof,olcDatabase={1}mdb,cn=config
objectClass: olcConfig
objectClass: olcMemberOf
objectClass: olcOverlayConfig
objectClass: top
olcOverlay: memberof
olcMemberOfDangling: ignore
olcMemberOfRefInt: TRUE
olcMemberOfGroupOC: groupOfNames
olcMemberOfMemberAD: member
olcMemberOfMemberOfAD: memberOf

The config is added using "slapadd -n0 -l /path/to/ldif", after that i add the users using slapadd.
To check if the overlay works i am trying to query the memberOf attribute using ldapvi: "ldapvi --discover "(uid=exampleUid)" memberOf"

Does anyone has a hint for me what i am doing wrong?

Best regards,
Alexander