status of dyngroup/dynlist?

[Ben Poliakoff <benp@reed.edu>]

I've been trying to learn a bit about the current dyngroup
implementation in openldap-2.2.26 (as well as the dynlist code recently
added to CVS).

In light of the discussion in:

    http://www.openldap.org/its/index.cgi/Contrib?id=3628

...how many people are using the current dyngroup overlay?  Will the
dynlist overlay replace or enhance the current dyngroup?  Notes in CVS
say that the dynlist overlay *should* work with openldap-2.2.x, but that
it still needs some work.

My initial attempts to get the dyngroup overlay working have yet to meet
with success (and, yes, I am testing with ldapcompare, not ldapsearch).

I built openldap-2.2.26 with --enable-dyngroup=yes

I'm configuring the overlay within my single database like this:

    overlay dyngroup
    attrpair member memberURL

I'm using the supplied dyngroup.schema file.

And I have a dyngroup entry that looks like:

    dn: cn=testgroup,ou=Group,dc=example,dc=com
    objectClass: groupOfURLs
    objectClass: top
    cn: testgroup
    memberURL: ldap:///ou=People,dc=example,dc=com?sub?(&(objectClass=posix
     account)(gidnumber=123))

But when I do an ldapcompare I get:

    ldapcompare -Q "cn=testgroup,ou=Group,dc=example,dc=com"\
        member:"uid=testuser,ou=people,dc=example,dc=com"
    ldap_compare: No such attribute (16)

What am I missing?

Ben