<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 2019/12/10 6:43 PM, Stevens, M
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:1576021405345-0.post@n2.nabble.com">
<pre class="moz-quote-pre" wrap="">...
Hopefully that's clear ... for whatever reason, ldapsearch thinks "memberOf"
is an operational attribute, the IDP doesn't appear to.</pre>
</blockquote>
<p><br>
</p>
<p>The "memberof" attribute generated by the memberof overlay *is*
an operational attribute. See the last line in the OpenLDAP admin
guide section "12.8.2. Member Of Configuration"<br>
</p>
<p><a class="moz-txt-link-freetext" href="https://www.openldap.org/doc/admin24/overlays.html#Member%20Of%20Configuration">https://www.openldap.org/doc/admin24/overlays.html#Member%20Of%20Configuration</a></p>
<p>
<blockquote type="cite">Note that the <b>memberOf</b> attribute
is an operational attribute, so it must be requested explicitly.</blockquote>
</p>
<p>-Phil<br>
</p>
</body>
</html>