Erik de Waard wrote:
As taken from elsewhere on this list:
The primary issue is that if a server goes into REFRESH mode, the order in which the entries are sent back may not allow the slapo-memberOf overlay to rebuild the groups correctly.
See https://bugs.openldap.org/show_bug.cgi?id=10167
that restriction has been eliminated.