--On Monday, November 1, 2021 11:53 AM -0400 Keith LeValley
I am working to migrate my LDAP setup to openldap, however I have run
into a problem around group membership.
Specifically my old instance of ldap used the attribute "groupMembership"
and I need to support this moving forward, so if you were to query the
attribute "groupMembership" it needs to return the groups the user is
Currently in my test environment I have the memberof overlay working, and
I found the option
The memberof Overlay is deprecated and should not be used. Ensure you are
using OpenLDAP 2.5 or later, and use the slapo-dynlist overlay to
dynamically populate the attribute for you based on your existing LDAP
groups. I would also look at fixing any application using
"groupMembership" to use the common memberOf.
Packaged, certified, and supported LDAP solutions powered by OpenLDAP: