Arvid Requate wrote: > Hi, > > just a quick heads up about an old question from 2019 on this list: > > On Monday, April 29, 2019 23:49 CEST Quanah Gibson-Mount <qua...@symas.com> > wrote: >> [...] >>> Is it possible to define two overlay configs or will they end up >>> fighting each other over the memberOf attribute? >> [...] >> I believe it should work fine. > > While Quanah is right, that loading two instances of slapo-memberof works > fine if configured with different target attributes (config option > `memberof-memberof-ad`), technically slapd denies loading multiple instances > of overlays since 2009: <https://bugs.openldap.org/show_bug.cgi?id=6030> > > Maybe one could challenge that decision to deny loading multiple instances > per se, as I think this limitation is not inherent to overlays in general but > may be reasonable for specific modules. Actually, I understand that some > overlay modules specify "SLAPO_BFLAG_SINGLE", so the general constraint > introduced via > <https://git.openldap.org/search?group_id=13&project_id=1&repository_ref=master&scope=commits&search=its%236030> > may be a child of its time and unnecessary today. See also > <https://bugs.openldap.org/show_bug.cgi?id=9309#c2>.
The two items you reference are completely unrelated. ITS#6030 rejects duplicate moduleload attempts - that is, it rejects multiple attempts to dynamically load the same code twice. That has no bearing on how many times you can configure a particular module that has been loaded. > > Thanks and regards, > Arvid > >> On Monday, April 29, 2019 23:49 CEST Quanah Gibson-Mount <qua...@symas.com> >> wrote: >> >> >> --On Wednesday, April 24, 2019 2:47 PM -0400 "John C. Pfeifer" >> <pfei...@umd.edu> wrote: >> >>> I am in the process of converting an existing LDAP infrastructure to >>> OpenLDAP. I have a case where it would be convenient for two different >>> objectClasses to map into the memberOf attribute. Is it possible to >>> define two overlay configs or will they end up fighting each other over >>> the memberOf attribute? For instance: >> Hi John, >> >> I believe it should work fine. >> >> Regards, >> Quanah >> >> >> >> -- >> >> Quanah Gibson-Mount >> Product Architect >> Symas Corporation >> Packaged, certified, and supported LDAP solutions powered by OpenLDAP: >> <http://www.symas.com> > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/