On 26 Jan 2016, at 14:34 , julien soula julien.soula@univ-lille2.fr wrote:

On Tue, Jan 26, 2016 at 11:43:59AM +0000, BÖSCH Christian wrote:

...

Jan 26 12:35:46 openldap1 slapd[84283]: => mdb_entry_get: found entry: "uid=user1,ou=people,o=abc.net" Jan 26 12:35:46 openldap1 slapd[84283]: => mdb_entry_get: found entry: "cn=group,ou=groups,o=abc.net"

are you sure that "uid=user1,ou=people,o=abc.net" is a member of "cn=group,ou=groups,o=abc.net” ?

yes i am. to me it seems that filter= following with attrs= (tested with several filters and attributes) does not work. if i omit attrs= it works to hide the whole entry. if i use a dn instead of filter i can use the attrs= to hide a single attribute.

christian

cdt,

Julien << Vous n'avez rien a dire... Parlons-en! >>