--On Monday, August 30, 2021 8:26 PM +0200 Saša-Stjepan Bakša ssbaksa@gmail.com wrote:

--On Monday, August 30, 2021 11:14 AM +0200 Saša-Stjepan Bakša ssbaksa@gmail.com wrote:

...

I have similar situation and also a replicated environment. I am using posixGroup only and never had any need for a memberOf attribute. But now, my devs have a software which insists on that attribute so I should provide it for them.

posixGroup is not a valid objectClass to use with providing memberOf information.

--Quanah

Ouch! I have 51 different posixGroup groups which have been in use for more than 10 years and now because of one piece of software I must change the way I manage them all. Not happy at all.

What is your suggestion Quanah? Can I just add an object? It would be a problem if I must change all services. Or maybe just add a few new groups of different types for that software. That will be great if it is appropriate.

@Dave Macias Can you share the structure of your groups?

member/memberOf depend on LDAP groups, not unix groups, which are based on DNs.

Example groups objectClasses are:

groupOfNames (core schema) groupOfUniqueNames (core schema) groupOfMembers (rfc2307bis schema)

Of these three, I would recommend either groupOfNames or groupOfMembers

Regards, Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com