apart from the fact that OpenLDAP 2.4.8 in conjunction with DB 4.6 ist absolutely BETA as mentioned in their docu, nevertheless I woul like asking about a problem I discovered.

Bevor upgrading (I did becauso of the syncrepl-facility) I stopped slapd and dumped its DB via "slapcat -l outfile.ldif" into a secure dumpfile. Then I removed the old DB-files in the database directory. Then I used "slapadd -l outfile.ldif" for restoring the database and after I recompiled everthing dependend on the ldap-client libs (nss_ldap, pam_ldap, pam_mkhomedir, sudo, postgresql), I was able to safely restart slapd. Everything seemed to work on a glimpse, but something was wrong. I've group-objects (ou=groups, POSIX groups) in my DIT with attribute "memberUID=XXXX". With OpenLDAP 2.3.41 'id' shows up a user's UID, GID and membership in additional groups, but with LDAP 2.4.8, only the UID and GID is shown:

uid=2002(ohartmann) gid=2002(ohartmann) groups=2002(ohartmann) (OpenLDAP 2.4.8)

but it should be

uid=2002(ohartmann) gid=2002(ohartmann) groups=2002(ohartmann),512(Domain Admins),513(Domain Users),544(Administrators),2045(development) (2.3.41)

Either something in the schemata has changed or something is wrong. I tried to find out via the doku at OpenLDAP.ORG, but can't find any revealing infos.

Can anybody help?

freebsd-questions@freebsd.org mailing list
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to