On Sun, 1 Jun 2025 10:49:11 +0200, Roland Gruber <p...@rolandgruber.de> wrote:
>there should be no need to create memberURL entries. All members of a 
>"groupOfNames" should have the memberOf attribute set now.

That is not the case; it just does not work. No memberOf attributes appear. 

I believe this is because my posixGroup entries do not appear to have the
groupOfNames object class. My groups are like this:

>    #### DN: cn=training,cn=groups,dc=mycompany,dc=com
>       cn => [ training ]
>       gidNumber => [ 100 ]
>       memberUid => [ alice, bob, carla, dave ],
>       objectClass => [ apple-group,extensibleObject,posixGroup,top ]

Attempting to add groupOfNames to any group (using tools outside of LAM pro) to
the entries results in:

  ERROR: 65 -- LDAP_OBJECT_CLASS_VIOLATION

Attempting to add this with LAM pro by editing the server template and then
attempting to add groups results in the same LDAP error.

If I go look at this LDAP wiki
(https://ldapwiki.com), it claims that the groupOfNames object class requires 
"member"
attributes, which none of my groups have. My groups instead have "memberUid"
attributes. 

I think I am back to having to add "member" attributes to every group? What
else am I missing?
-- 
Dave Hayes - Computer and Internet Consultant - LA CA, USA
  >> *Opinions expressed above are entirely my own* <<

I went to buy some camouflage trousers the other day but I couldn't find any.


_______________________________________________
Lam-public mailing list
Lam-public@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lam-public

Reply via email to