I have now tested dynlist and I have the memberOf working. Good.


I did a "remove user" test...

When I remove a user from the database, the entry is still present in the lists the user was member of.

In memberof(overlay) I used the "memberof-refint true" and this option removed the user from the lists (i think it was this option). Can I get the same behavior with dynlist (ie automatically remove deleted users from all lists) ?
Från: Magnus Morén <magnus.moren@hh.se>
Skickat: den 1 december 2021 18:16
Till: openldap-technical@openldap.org <openldap-technical@openldap.org>; Quanah Gibson-Mount <quanah@symas.com>
Ämne: Sv: Move from memberof to dynlist
 
Thank you for your rapid and helpful answer.


I got it working when waiting for the mail to be approved...

The successful syntax is now:

overlay dynlist
dynlist-attrset groupOfURLs memberURL uniqueMember+memberOf@groupOfUniqueNames


Best reagrds
Från: Quanah Gibson-Mount <quanah@symas.com>
Skickat: den 1 december 2021 17:48
Till: Magnus Morén <magnus.moren@hh.se>; openldap-technical@openldap.org <openldap-technical@openldap.org>
Ämne: Re: Move from memberof to dynlist
 


--On Wednesday, December 1, 2021 3:41 PM +0000 Magnus Morén
<magnus.moren@hh.se> wrote:

>
> I am trying to move from memberof(overlay) to dynlist but can't get it to
> work.

>  overlay dynlist
>  dynlist-attrset groupOfURLs memberURL member+memberOf@groupOfNames
>
> This dynamic memberOf feature can fully replace the functionality of the
> slapo-memberof(5) overlay.


Your attribute is "uniqueMember" not member, and your group objectClass is
"groupOfUniqueNames" not groupofNames.  You need to adjust the
dynlist-attrset accordingly.

--Quanah


--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>