Thanks, Quanah. I did that and see that memberof was populated. However, I also noticed that the number of groups returned when I query for the memberOf attribute on one account doesn't match the number of groups returned when I search for all groups that this particular user is a member of. Do you have any ideas what could be the cause of this mismatch or where I should look when troubleshooting? I checked a few other accounts and the numbers match.
Thanks,
Razi
-- Razi Ahmad Director, IT Infrastructure Services NYU Stern School of Business 14 East 4th Street, Room 327, New York, NY 10012 Phone: 212-998-0172 | Email: razi@stern.nyu.edu Follow us on Twitter: @nyustern
An Education in *Possible*
On Tue, Aug 20, 2019 at 4:31 PM Quanah Gibson-Mount quanah@symas.com wrote:
--On Tuesday, August 20, 2019 5:17 PM -0400 Razi Ahmad razi@stern.nyu.edu
wrote:
Hi,
I'm working on migrating from OpenLDAP 2.3 to 2.4. I've got my 2.4 provider set up and customized and have a copy of production data to load. I'd like to know if there's any way to have the memberof attribute populated during the process of loading the data. I used slapadd but when I searched for a user, I didn't see the memberOf attribute. Prior to running the slapadd command, I replaced the groupOfUniqueNames objectClass with groupOfNames and the uniqueMember attribute with member inside my LDIF file.
You'll have to use ldapadd if you want memberOf populated.
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
--On Tuesday, August 20, 2019 7:32 PM -0400 Razi Ahmad razi@stern.nyu.edu wrote:
Thanks, Quanah. I did that and see that memberof was populated. However, I also noticed that the number of groups returned when I query for the memberOf attribute on one account doesn't match the number of groups returned when I search for all groups that this particular user is a member of. Do you have any ideas what could be the cause of this mismatch or where I should look when troubleshooting? I checked a few other accounts and the numbers match.
Hi Razi,
Not without more information. What version of OpenLDAP 2.4 did you upgrade to? Are all the groups of the same objectClass type? I assume the other users are also in those same groups? You could try deleting and re-adding the user as a member to see if that resolves it.
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
openldap-technical@openldap.org