MEMBEROF=1 not working

[acislik]

trafficstars

Hi,

I tried to to set "MEMBEROF=1" but it doesn't work:

openldap_1  | 5af71a77 lt_dlopenext failed: (refint) file not found
openldap_1  | slapcat: bad configuration file!
docker_openldap_1 exited with code 1

Looking at the "slapd.conf" it tries to load the Module "refint"

modulepath  /usr/lib/openldap
moduleload refint

but the Module seems not to exist in the image (started without "MEMBEROF=1"):

root@openldap[991d0fcdaa36]:/# ls -la /usr/lib/openldap
total 216
drwxr-xr-x    2 root     root          4096 Apr 17 10:37 .
drwxr-xr-x    1 root     root          4096 Apr 17 10:37 ..
lrwxrwxrwx    1 root     root            22 Apr 17 10:37 back_mdb-2.4.so.2 -> back_mdb-2.4.so.2.10.8
-rwxr-xr-x    1 root     root        211960 Nov  9  2017 back_mdb-2.4.so.2.10.8
lrwxrwxrwx    1 root     root            22 Apr 17 10:37 back_mdb.so -> back_mdb-2.4.so.2.10.8
root@openldap[991d0fcdaa36]:/#

[MiguelAngelLV]

Any news?

[mwaeckerlin]

Sorry, I miscategorized the topic, it is not yet a feature (not yet documented), but something I was experimenting with, so it's not a bug, but a feature request.

I investigated on this, but did not get it to work. Any help would be appreciated.

[singhindresh]

I was trying the memberof but I got the same error. Below are my instructions to enable memerof on bdb successfully, and my old ldap server works as expected. I tried to modify the schema in docker container with mdb but it didn't work. I hope this will help you.

#Create LDAP config files as below (also attached) $ cat memberof_config_1.ldif dn: cn=module,cn=config cn: module objectClass: olcModuleList olcModuleLoad: memberof olcModulePath: /usr/lib64/openldap

$ cat memberof_config_2.ldif dn: olcOverlay={0}memberof,olcDatabase={1}bdb,cn=config objectClass: olcConfig objectClass: olcMemberOf objectClass: olcOverlayConfig objectClass: top olcOverlay: memberof olcMemberOfDangling: ignore olcMemberOfRefInt: TRUE olcMemberOfGroupOC: groupOfNames olcMemberOfMemberAD: member olcMemberOfMemberOfAD: memberOf

$ cat refint1_modified.ldif dn: cn=module,cn=config cn: module objectclass: olcModuleList objectclass: top olcmoduleload: refint.la olcmodulepath: /usr/lib/openldap

$ cat refint2.ldif dn: olcOverlay={1}refint,olcDatabase={1}bdb,cn=config objectClass: olcConfig objectClass: olcOverlayConfig objectClass: olcRefintConfig objectClass: top olcOverlay: {1}refint olcRefintAttribute: memberof member manager owner

Load the config files using following command a restart the LDAP.

ldapadd -x -D "cn=admin,dc=x,dc=x" -w "1234567890" -h localhost -p 389 -D CN=config -W -f memberof_config_1.ldif ldapadd -x -D "cn=admin,dc=x,dc=x" -w "1234567890" -h localhost -p 389 -D CN=config -W -f memberof_config_2.ldif ldapadd -D "cn=admin,dc=x,dc=x" -w "1234567890" -h localhost -p 389 -D CN=config -W -f refint1_modified.ldif ldapadd -D "cn=admin,dc=x,dc=x" -w "1234567890" -h localhost -p 389 -D CN=config -W -f refint2.ldif

6. Restart the LDAP using service slapd stop service slapd start