/-----------------------------------\

| master1 <- mirror repl -> master2 |

-----------------------------------/

^         ^               ^

|         |               |

syncrepl  syncrepl        syncrepl

|         |               |

/-------\ /-------\       /-------\

|cache01| |cache02|  ...  |cache n|

-------/ -------/       -------/

The master servers are using mirror replication and are behind a load balancer setup for active/passive failover.  All writes go to the active master where the "member" attribute is maintained for the groups.  The cache servers get their data from the master servers using syncrepl replication.  All the end clients connect to the cache servers.

I need to be able to present the memberOf attribute on users on the cache servers.  The man page for slapo-memberof states that it is not compatible with syncrepl.  Because of this the cache servers are using slapo-dynlist to create the memberOf attribute.  The problem is since I am using a dynamic list I can not search using the memberOf attribute only query its value.  I need to be able to search by the memberOf attribute.

What is the recommended way generate the memberOf atribute?  Should I modify the schema for a user and somehow maintain the memberOf attribute on the masters?  I am a bit worried about this since looking at the slapo-memberOf source the memberOf attribute it is flagged as a DSAOperation.