On Mon, 09 Dec 2013 10:12:42 +0000 Liam Gretton liam.gretton@leicester.ac.uk wrote
The way I worked around this is to create new groups as groupOfNames with a single empty member: attribute. It's never caused any problems with any clients in my experience.
Yes, working around it with cn=dummy is possible. Take care of config of slapo-refint.
But it's bad practice if you want to have fine-grained constraints for 'member' to existing and active member entries.
Ciao, Michael.