memberuid value should be DN or RDN or both woks

To: "openldap-technical@openldap.org" <openldap-technical@openldap.org>

Subject: memberuid value should be DN or RDN or both woks

From: <scn_73@yahoo.com>

Date: Tue, 19 Apr 2016 15:25:53 +0000 (UTC)

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1461079565; bh=95UB7oKUfyCRzT892s6M45Kil+IdMYtDUqy7CQKFU4M=; h=Date:From:Reply-To:To:Subject:References:From:Subject; b=VQY0wtSyWeaOu6SUQylbk18z7gO/yEzLybtzEbKIl/mzvLweYafyTUu8JIAq2ld5/pST1eQmseUA3a8SVHfOYIjrTCVia4qh5aXESPlpg0h5PWsfnFvlHt/XJ4/rVVM2H01wS8a7f+4wtPSBnFSp1YUFVg1Jw3IBrzCXuQyr3/rsbM+AR0mNTNU3UJs+Nnsmg3UTKEQT+k7dTe5FCJIfw78Q3TFZOm00BJzEl4oi0k3DJx20qUXLVjbIeYBQZ6NKZGd1VTmoapfYNdq33gQQ3G0t848Ky4dw1IOP0Zmzc527bgsgywt8Ww8nknS96rgc9kJpKGzknSadT54Y9INvvA==

References: <247307243.2647217.1461079553817.JavaMail.yahoo.ref@mail.yahoo.com>

All,

Openldap is complaining invalid dn. I doubt, it's for group members those memberuid don't have have DN and added as RDN. Like to know does memberuid should be DN or RDN works too.

slapd[4892]: conn=1629448 op=2180 do_search: invalid dn (member1)
slapd[4892]: conn=1629448 op=2181 do_search: invalid dn (memver2)
slapd[4892]: conn=1629448 op=2182 do_search: invalid dn (member2)

objectClass: posixGroup
objectClass: top
cn: g1
gidNumber: xxxx
memberUid: member1
memberUid: member2
memberUid: member3

- Sachin