Openldap posix memberof

memberof_config.ldif

dn: olcOverlay={0}memberof,olcDatabase={1}mdb,cn=config
objectClass: olcConfig
objectClass: olcMemberOf
objectClass: olcOverlayConfig
objectClass: top
olcOverlay: memberof
olcMemberOfDangling: ignore
olcMemberOfRefInt: TRUE
olcMemberOfGroupOC: groupOfNames
olcMemberOfMemberAD: member

refint1.ldif

dn: cn=module{1},cn=config
add: olcmoduleload
olcmoduleload: refint

refint2.ldif

dn: olcOverlay={1}refint,olcDatabase={1}mdb,cn=config
objectClass: olcConfig
objectClass: olcOverlayConfig
objectClass: olcRefintConfig
objectClass: top
olcOverlay: {1}refint
olcRefintAttribute: memberof member manager owner

add

• ldapadd -Q -Y EXTERNAL -H ldapi:/// -f memberof_config.ldif
• ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f refint1.ldif
• ldapadd -Q -Y EXTERNAL -H ldapi:/// -f refint2.ldif

test

• ldapsearch -x -LLL -H ldap:/// -b uid=john,ou=people,dc=example,dc=com dn memberof

Links

• http://www.adimian.com/blog/2014/10/how-to-enable-memberof-using-openldap