Hi all, I am facing problem with "memberof" overlay. I have followed following steps for installation on my CentOS release 5.5:
env LIBS=-ldb ./configure --enable-overlays [I also tried with env LIBS=-ldb ./configure --enable-memberof] make depend make make install
in my slapd.conf file, I have enable memberof overlay:
include /usr/local/etc/openldap/schema/core.schema include /usr/local/etc/openldap/schema/cosine.schema include /usr/local/etc/openldap/schema/local.schema
... modulepath /usr/local/libexec/openldap moduleload memberof.la
... database bdb suffix "dc=mybrocade,dc=com" rootdn "cn=Manager,dc=xxx,dc=com"
rootpw {SSHA}HL8uT5hPaWyIdcP6yAheMT8n0GoWubr3 index objectClass eq
overlay memberof
When I start slapd (slapd -d -1), it gives these lines in log: line 27 (modulepath /usr/local/libexec/openldap) /usr/local/etc/openldap/slapd.conf: line 27: keyword <modulepath> ignored line 31 (moduleload memberof.la) /usr/local/etc/openldap/slapd.conf: line 31: keyword <moduleload> ignored
When I try searching for memberof Attribute, it doesn't return the value: ldapsearch -LL -D cn=Manager,dc=xxx,dc=com -w secret "cn=sachin" -b dc=xxx,dc=com memberOf
version: 1
dn: cn=Sachin,cn=Users,dc=xxx,dc=com <there is no entry for memberof>
I tried searching for memberof.la but I could not find any instance of it in the system. Am I missing something here?
Here is the place, where I have specified the "member" attribute:
ldapsearch -LL -D cn=Manager,dc=xxx,dc=com -w ***** "cn=admin" -b dc=xxx,dc=com version: 1
dn: cn=admin,ou=groups,dc=xxx,dc=com objectClass: groupOfNames cn: admin description: Members having admin permission member: cn=sachin,cn=Users,dc=xxx,dc=com
Thanks, Sachin
sachin mishra wrote:
Hi all, I am facing problem with "memberof" overlay. I have followed following steps for installation on my CentOS release 5.5:
Which OpenLDAP release?
... modulepath /usr/local/libexec/openldap moduleload memberof.la [..] When I start slapd (slapd -d -1), it gives these lines in log: line 27 (modulepath /usr/local/libexec/openldap) /usr/local/etc/openldap/slapd.conf: line 27: keyword <modulepath> ignored line 31 (moduleload memberof.la) /usr/local/etc/openldap/slapd.conf: line 31: keyword <moduleload> ignored
This simply means that OpenLDAP was built statically. So the overlays should be compiled into the slapd binary.
When I try searching for memberof Attribute, it doesn't return the value: ldapsearch -LL -D cn=Manager,dc=xxx,dc=com -w secret "cn=sachin" -b dc=xxx,dc=com memberOf
Did you update the group entries *after* enabling slapo-memberof?
Ciao, Michael.
openldap-technical@openldap.org