Re: OpenLDAP 2.3 to 2.4 Migration Question

To: Quanah Gibson-Mount <quanah@symas.com>

Subject: Re: OpenLDAP 2.3 to 2.4 Migration Question

From: Razi Ahmad <razi@stern.nyu.edu>

Date: Tue, 20 Aug 2019 18:38:38 -0400

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=stern.nyu.edu; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=y5/O4Horv3Eq9bjx866OYuq+dUZh6RNuabEKiQ0iaM8=; b=kshlQLQFrJqN+XqS6phJ8Nyap+KS8W9VuqYBLDfpkTwZMthZ5xfBZuh8h603n/0YTe 0WRVMvtdaAEI/Fd2AYwLYYDQfhOxWdoKvBw1PfFJSW7WlsfPCzQ3sLZOfoqcD/1Shzux Lg+aj218OwCTr85o1YMaZiveMivAwDACLq5nc=

In-reply-to: <589D23A066535CBC03757892@192.168.1.144>

References: <CAGzf0RFEnwQBE6gmLRUJdVbyQs5z5QtyQSH3QEGZj7yCGSaO7w@mail.gmail.com> <861CBFD670E42822131A8649@192.168.1.144> <CAGzf0RFGz8j2k-S2Zynw2PtS3n+8=tXtM3SiMWZ-bV50EvrSfw@mail.gmail.com> <589D23A066535CBC03757892@192.168.1.144>

Thanks, I'll do that.

Razi Ahmad

Director, IT Infrastructure Services

NYU Stern School of Business

14 East 4th Street, Room 327, New York, NY 10012

Phone: 212-998-0172 | Email: razi@stern.nyu.edu

An Education in Possible

On Tue, Aug 20, 2019 at 6:36 PM Quanah Gibson-Mount <quanah@symas.com> wrote:

--On Tuesday, August 20, 2019 7:32 PM -0400 Razi Ahmad <razi@stern.nyu.edu>
wrote:

>
> Thanks, Quanah. I did that and see that memberof was populated. However,
> I also noticed that the number of groups returned when I query for the
> memberOf attribute on one account doesn't match the number of groups
> returned when I search for all groups that this particular user is a
> member of. Do you have any ideas what could be the cause of this mismatch
> or where I should look when troubleshooting? I checked a few other
> accounts and the numbers match.

Hi Razi,

Not without more information. What version of OpenLDAP 2.4 did you upgrade
to? Are all the groups of the same objectClass type? I assume the other
users are also in those same groups? You could try deleting and re-adding
the user as a member to see if that resolves it.

--Quanah

--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>