[Date Prev][Date Next] [Chronological] [Thread] [Top]

Need help getting dynlist working


I built openldap-2-3-20 and cannot figure out why dynlists are not working (dyngroups are working). I have the following dynamic group set up:

ldapum:~# ldapsearch -x -H ldaps://ldapum.nsd.org "(cn=svrtechs)"
# svrtechs, Groups, nsd.org
dn: cn=svrtechs,ou=Groups,dc=nsd,dc=org
objectClass: groupOfURLs
cn: svrtechs
memberURL: ldap:///ou=people,dc=nsd,dc=org??sub?nsdGroups=svrtechs

This works fine for dyngroups:
ldapum:~# ldapcompare -x -H ldaps://ldapum.nsd.org "cn=svrtechs,ou=groups,dc=nsd,dc=org" member:"uid=gmanning,ou=people,dc=nsd,dc=org"

In slapd.conf I have:
overlay dyngroup
attrpair member memberURL

overlay dynlist
dynlist-attrset groupOfURLs memberURL member

And when I turn on logging at levels 5 and 256 I see
Jun 3 04:21:10 localhost slapd[11333]: config_build_entry: "olcOverlay={1}dynlist"

so it seems to be loading dynlist. But I am not seeing the group members show up in the group.

I built openldap with the following configure command:
./configure --prefix=/opt/openldap --enable-syslog --enable-wrappers --enable-overlays=yes --enable-bdb=no --enable-meta-yes --enable-ldap=yes --enable-monitor=yes --enable-hdb=yes --localstatedir=/var/openldap --enable-cleartext --enable-shared=no

Any ideas on how to debug this are most appreciated.



"When we try to pick out anything by itself, we find it
 connected to the entire universe"            John Muir

Chris "Ski" Kacoroski, ski@nsd.org, 206-501-9803