syncrep and memberof

To: openldap-technical@openldap.org

Subject: syncrep and memberof

From: Yuri Bank <yuribank@gmail.com>

Date: Fri, 17 Dec 2010 06:55:19 -0800

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=3rlFqv18VFs6j1lJAchz80Z01rfOVm5mGFNSitkA7iA=; b=BIbh48NzrY6ZB0Swq1H1hRcWvkiYhn2tgO9q0wZ+NAP1g31PuJpYeQbuVg3ZV2gJfL GPj6uSb7hMvBQxXPhE1gdwUJrHuCD7FHaJfnG8XQQlEQ4TlrqDEDJbfGDReELa+660au 1TopZO5dLC5KIAt0yMjdGaLXVWeSdfaXmbWIo=

Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=o8gXIhSPtcYvQVv4eDFWPPBrl6IcCJ3X0lcRcYxElh/frYsrxOFc2uFohZVRUvQC4Z OhhsO09u/TFUdeQUs7gEmAx6JaqtaLEyKyQVF6j4c3q2aUJQZdzWMQZW3LJLuB+JvTmx cTRaAqW7zIUduAjQ5FyJe7pxRg7s/xOipXEyo=

Are there any known issues with these two overlays when used together? I'm curious what the suggested configuration would be in a single Provider + many Consumer setup. Should the memberof overlay be enabled on the consumer nodes or just the provider? I've noticed that when I add new users to the database, all users under that OU will be refreshed and at which time I lose the memberof attribute for SOME of the users, on only 1 or 2 of the consumer nodes. It seems like a bug, but I wonder if there is any way to get around this. I was thinking of trying delta-sync replication.