Hi I am trying to configure the linked attributes plugin, to make it work like the memberf plugin, but with the uniquemember attribute instead of the member attribute. I have found that this plugin is not included in FDS v1.1.3, but yes in 1.2.2. Which version did start to include this plugin? We have servers with mixed versions. How will this plugin behave with read only databases? Will the attribute memberOf be included in users whose database is configured ad "referral on update", on only in those configured ad "backend"? Regards.
Hi, you can configure the memberOf plugin to use uniqueMember/memberOf attributes. You don''t need linked attributes plug-in for that. As for the date of birth :) of the linked attribuites plug-in, according to git commits the plug-in appeared end of june, so it should be present at least in version 1.2.3. 2009/12/15 Juan Asensio Sánchez <okelet@gmail.com>:> Hi > > I am trying to configure the linked attributes plugin, to make it work like > the memberf plugin, but with the uniquemember attribute instead of the > member attribute. I have found that this plugin is not included in FDS > v1.1.3, but yes in 1.2.2. Which version did start to include this plugin? We > have servers with mixed versions. > > How will this plugin behave with read only databases? Will the attribute > memberOf be included in users whose database is configured ad "referral on > update", on only in those configured ad "backend"? > > Regards. > > -- > 389 users mailing list > 389-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > >
Hi I am using the linked attributes plugin because we use the uniquemember attribute instead of member, and according to documentation ( http://directory.fedoraproject.org/wiki/MemberOf_Plugin), the attribute name is not configurable. Regards. 2009/12/15 Andrey Ivanov <andrey.ivanov@polytechnique.fr>> Hi, > > you can configure the memberOf plugin to use uniqueMember/memberOf > attributes. You don''t need linked attributes plug-in for that. > > As for the date of birth :) of the linked attribuites plug-in, > according to git commits the plug-in appeared end of june, so it > should be present at least in version 1.2.3. > > > > 2009/12/15 Juan Asensio Sánchez <okelet@gmail.com>: > > Hi > > > > I am trying to configure the linked attributes plugin, to make it work > like > > the memberf plugin, but with the uniquemember attribute instead of the > > member attribute. I have found that this plugin is not included in FDS > > v1.1.3, but yes in 1.2.2. Which version did start to include this plugin? > We > > have servers with mixed versions. > > > > How will this plugin behave with read only databases? Will the attribute > > memberOf be included in users whose database is configured ad "referral > on > > update", on only in those configured ad "backend"? > > > > Regards. > > > > -- > > 389 users mailing list > > 389-users@redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > -- > 389 users mailing list > 389-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
it IS configurable. We are using it in exactly the same config that you want it (uniqueMember/memberOf). here is the configuration of the plug-in (in dse.ldif) : dn: cn=MemberOf Plugin,cn=plugins,cn=config objectClass: top objectClass: nsSlapdPlugin objectClass: extensibleObject cn: MemberOf Plugin ... nsslapd-pluginEnabled: on ... memberofgroupattr: uniqueMember memberofattr: memberOf nsslapd-pluginId: memberof ... The ldif to make this config : dn: cn=MemberOf Plugin,cn=plugins,cn=config changetype: modify replace: memberofgroupattr memberofgroupattr: uniqueMember - replace: memberofattr memberofattr: memberOf - replace: nsslapd-pluginEnabled nsslapd-pluginEnabled: on @+ 2009/12/15 Juan Asensio Sánchez <okelet@gmail.com>:> Hi > > I am using the linked attributes plugin because we use the uniquemember > attribute instead of member, and according to documentation > (http://directory.fedoraproject.org/wiki/MemberOf_Plugin), the attribute > name is not configurable. > > Regards. > > 2009/12/15 Andrey Ivanov <andrey.ivanov@polytechnique.fr> >> >> Hi, >> >> you can configure the memberOf plugin to use uniqueMember/memberOf >> attributes. You don''t need linked attributes plug-in for that. >> >> As for the date of birth :) of the linked attribuites plug-in, >> according to git commits the plug-in appeared end of june, so it >> should be present at least in version 1.2.3. >> >> >> >> 2009/12/15 Juan Asensio Sánchez <okelet@gmail.com>: >> > Hi >> > >> > I am trying to configure the linked attributes plugin, to make it work >> > like >> > the memberf plugin, but with the uniquemember attribute instead of the >> > member attribute. I have found that this plugin is not included in FDS >> > v1.1.3, but yes in 1.2.2. Which version did start to include this >> > plugin? We >> > have servers with mixed versions. >> > >> > How will this plugin behave with read only databases? Will the attribute >> > memberOf be included in users whose database is configured ad "referral >> > on >> > update", on only in those configured ad "backend"? >> > >> > Regards. >> > >> > -- >> > 389 users mailing list >> > 389-users@redhat.com >> > https://www.redhat.com/mailman/listinfo/fedora-directory-users >> > >> > >> >> -- >> 389 users mailing list >> 389-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > -- > 389 users mailing list > 389-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > >
Hi Andrey Thak you very much. The memberOf plugin is working fine in a test server. Have you any experience with read only databases (configured as "referral on update")? Also, we have defined many replication agreements that are already working. Thay are configured to sync all attributes, but now I have to exclude the memberOf attribute. Is possible to modify current agreements to exclude that attribute or must I re-create all them again? Regards. 2009/12/15 Andrey Ivanov <andrey.ivanov@polytechnique.fr>> it IS configurable. We are using it in exactly the same config that > you want it (uniqueMember/memberOf). here is the configuration of the > plug-in (in dse.ldif) : > > dn: cn=MemberOf Plugin,cn=plugins,cn=config > objectClass: top > objectClass: nsSlapdPlugin > objectClass: extensibleObject > cn: MemberOf Plugin > ... > nsslapd-pluginEnabled: on > ... > memberofgroupattr: uniqueMember > memberofattr: memberOf > nsslapd-pluginId: memberof > ... > > The ldif to make this config : > > dn: cn=MemberOf Plugin,cn=plugins,cn=config > changetype: modify > replace: memberofgroupattr > memberofgroupattr: uniqueMember > - > replace: memberofattr > memberofattr: memberOf > - > replace: nsslapd-pluginEnabled > nsslapd-pluginEnabled: on > > > @+ > 2009/12/15 Juan Asensio Sánchez <okelet@gmail.com>: > > Hi > > > > I am using the linked attributes plugin because we use the uniquemember > > attribute instead of member, and according to documentation > > (http://directory.fedoraproject.org/wiki/MemberOf_Plugin), the attribute > > name is not configurable. > > > > Regards. > > > > 2009/12/15 Andrey Ivanov <andrey.ivanov@polytechnique.fr> > >> > >> Hi, > >> > >> you can configure the memberOf plugin to use uniqueMember/memberOf > >> attributes. You don''t need linked attributes plug-in for that. > >> > >> As for the date of birth :) of the linked attribuites plug-in, > >> according to git commits the plug-in appeared end of june, so it > >> should be present at least in version 1.2.3. > >> > >> > >> > >> 2009/12/15 Juan Asensio Sánchez <okelet@gmail.com>: > >> > Hi > >> > > >> > I am trying to configure the linked attributes plugin, to make it work > >> > like > >> > the memberf plugin, but with the uniquemember attribute instead of the > >> > member attribute. I have found that this plugin is not included in FDS > >> > v1.1.3, but yes in 1.2.2. Which version did start to include this > >> > plugin? We > >> > have servers with mixed versions. > >> > > >> > How will this plugin behave with read only databases? Will the > attribute > >> > memberOf be included in users whose database is configured ad > "referral > >> > on > >> > update", on only in those configured ad "backend"? > >> > > >> > Regards. > >> > > >> > -- > >> > 389 users mailing list > >> > 389-users@redhat.com > >> > https://www.redhat.com/mailman/listinfo/fedora-directory-users > >> > > >> > > >> > >> -- > >> 389 users mailing list > >> 389-users@redhat.com > >> https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > -- > > 389 users mailing list > > 389-users@redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > -- > 389 users mailing list > 389-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
Juan Asensio Sánchez wrote:> Hi Andrey > > Thak you very much. The memberOf plugin is working fine in a test > server. Have you any experience with read only databases (configured > as "referral on update")? > > Also, we have defined many replication agreements that are already > working. Thay are configured to sync all attributes, but now I have to > exclude the memberOf attribute. Is possible to modify current > agreements to exclude that attribute or must I re-create all them again?Yes, you should be able to just add that attribute to be excluded wthout having to recreate and reinit all of your replication agreements.> > Regards. > > 2009/12/15 Andrey Ivanov <andrey.ivanov@polytechnique.fr > <mailto:andrey.ivanov@polytechnique.fr>> > > it IS configurable. We are using it in exactly the same config that > you want it (uniqueMember/memberOf). here is the configuration of the > plug-in (in dse.ldif) : > > dn: cn=MemberOf Plugin,cn=plugins,cn=config > objectClass: top > objectClass: nsSlapdPlugin > objectClass: extensibleObject > cn: MemberOf Plugin > ... > nsslapd-pluginEnabled: on > ... > memberofgroupattr: uniqueMember > memberofattr: memberOf > nsslapd-pluginId: memberof > ... > > The ldif to make this config : > > dn: cn=MemberOf Plugin,cn=plugins,cn=config > changetype: modify > replace: memberofgroupattr > memberofgroupattr: uniqueMember > - > replace: memberofattr > memberofattr: memberOf > - > replace: nsslapd-pluginEnabled > nsslapd-pluginEnabled: on > > > @+ > 2009/12/15 Juan Asensio Sánchez <okelet@gmail.com > <mailto:okelet@gmail.com>>: > > Hi > > > > I am using the linked attributes plugin because we use the > uniquemember > > attribute instead of member, and according to documentation > > (http://directory.fedoraproject.org/wiki/MemberOf_Plugin), the > attribute > > name is not configurable. > > > > Regards. > > > > 2009/12/15 Andrey Ivanov <andrey.ivanov@polytechnique.fr > <mailto:andrey.ivanov@polytechnique.fr>> > >> > >> Hi, > >> > >> you can configure the memberOf plugin to use uniqueMember/memberOf > >> attributes. You don''t need linked attributes plug-in for that. > >> > >> As for the date of birth :) of the linked attribuites plug-in, > >> according to git commits the plug-in appeared end of june, so it > >> should be present at least in version 1.2.3. > >> > >> > >> > >> 2009/12/15 Juan Asensio Sánchez <okelet@gmail.com > <mailto:okelet@gmail.com>>: > >> > Hi > >> > > >> > I am trying to configure the linked attributes plugin, to > make it work > >> > like > >> > the memberf plugin, but with the uniquemember attribute > instead of the > >> > member attribute. I have found that this plugin is not > included in FDS > >> > v1.1.3, but yes in 1.2.2. Which version did start to include this > >> > plugin? We > >> > have servers with mixed versions. > >> > > >> > How will this plugin behave with read only databases? Will > the attribute > >> > memberOf be included in users whose database is configured ad > "referral > >> > on > >> > update", on only in those configured ad "backend"? > >> > > >> > Regards. > >> > > >> > -- > >> > 389 users mailing list > >> > 389-users@redhat.com <mailto:389-users@redhat.com> > >> > https://www.redhat.com/mailman/listinfo/fedora-directory-users > >> > > >> > > >> > >> -- > >> 389 users mailing list > >> 389-users@redhat.com <mailto:389-users@redhat.com> > >> https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > -- > > 389 users mailing list > > 389-users@redhat.com <mailto:389-users@redhat.com> > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > -- > 389 users mailing list > 389-users@redhat.com <mailto:389-users@redhat.com> > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > ------------------------------------------------------------------------ > > -- > 389 users mailing list > 389-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >