Hi,

we've been long using OpenLDAP as a backbone for almost everything (users, groups, DNS, DHCP, ...) and we've finally reached the point where we want or better NEED to migrate away from the vanilla debian packages.

This is mostly due to the fact that our sync-repl based replication loses data every now and then, which is a real pain to detect and then to fix.

So, as far as I understand, our best bet is to migrate to the latest packages from Symas :)

However, I think to remember a discussion about the membersOf overlay not working reliably with sync-repl even with the Symas packages. Is this correct and if so, what would be the best way to have membersOf functionality?

And, what would be the best way to upgrade? Are the symas packages just a drop in replacement from the debian packages or is better to start from scratch and import the LDAP tree?

Thanks

Udo