[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#8825) slapo-memberof: memberof-memberof-ad doesn't work correctly

--On Wednesday, March 28, 2018 1:14 AM +0100 Howard Chu <hyc@symas.com> 
wrote:

> That's because memberOf is an operational attribute, so objectclass
> requirements don't apply. If you want to use some other attribute, make
> sure the schema allows it in the relevant entries, or use an operational
> attribute.
>
> Not a bug. Closing this ITS.

For historical purposes, it is a bit more complex than this.

It is not possible to include an operational attribute via the normal 
schema methods.  This depends on the "dsaschema" contrib overlay.  That 
contrib overlay requires development to support cn=config.

The alternative to using an operational attribute is to have a custom 
objectClass where the custom attribute desired is defined as an optional 
("MAY") attribute.

--Quanah

--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>