Unable to get memberOf (OpenLDAP, using memberof overlay)

[Phil Pishioneri]

On 2019/12/10 6:43 PM, Stevens, M wrote:
> ...
> Hopefully that's clear ... for whatever reason, ldapsearch thinks "memberOf"
> is an operational attribute, the IDP doesn't appear to.


The "memberof" attribute generated by the memberof overlay *is* an
operational attribute. See the last line in the OpenLDAP admin guide
section "12.8.2. Member Of Configuration"

https://www.openldap.org/doc/admin24/overlays.html#Member%20Of%20Configuration

> Note that the *memberOf* attribute is an operational attribute, so it
> must be requested explicitly.

-Phil

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191211/6ab44b23/attachment.html>