Re: Subtree renames and memberOf handling

[Michael Ströder <michael@stroeder.com>]

Michael Ströder wrote:
> Pierangelo Masarati wrote:
> > Michael Ströder wrote:
> >
> > > > Yes, slapo-memberof(5) does not consider the possibility of a subtree
> > > > rename, and thus takes no care of it.
> > > Would deploying slapo-refint be of help here?
> >
> > Could be.  Did you try, by chance?
>
> Hmm, does not work for me. Not sure about current state of HEAD and 
> order of my overlay config. I also wonder about parameter memberof-refint.

And even worse if you remove the member from the group the dangling 
reference DN in memberOf does not get removed. Even setting

  memberof-dangling drop

in slapd.conf doesn't help.

Ciao, Michael.