Friday, February 6, 2026

[389-users] Re: memberof entries not displayed in uid ( version 3.1)

Hi,

On Fri, Feb 6, 2026 at 4:33 AM Ghiurea, Isabella via 389-users <389-users@lists.fedoraproject.org> wrote:

Hi List,
I 'm testing DS migration from 389-DS 1.2.3 to 389-DS 3.1   RH9 with memberof plugin been enable when checking for users the  entries for memberof are missing. for each uid.
Are any  cfg params in dse.ldif which may stop from displaying the memberof entries ?
See details :

# 8211065Users, ds, xxxx
dn: uid=8211065,ou=Users,ou=ds,dc=xxxxx
userPassword:: e1NTSEF9K25kcXZ
 = Missing memberOf entries 

In old 389-DS version 1.2.3  I have for same uid

dn: uid=8211065ou=Users,ou=ds,dc=xxxx
****memberOf: cn=xxxx,ou=Groups,ou=ds,dc=xxxxxxx  >>>  mssing for each uid in 389-DS version 3.1
****memberOf: cn=xxxx-users,ou=Groups,ou=ds,dc=cxxxx >>>same 
#######################################
DS version 3.1  errorlog 

dsconf slapd-testldap plugin memberof fixup "dc=xxx,dc=xxx"
dsconf slapd-testldap plugin memberof fixup-status

INFO - memberof-plugin - memberof_fixup_task_thread - Memberof task starts (filter: "(|(objectclass=inetuser)(objectclass=inetadmin)(objectclass=nsmemberof))") ...
[05/Feb/2026:18:44:51.265924012 -0800] - INFO - memberof-plugin - memberof_fixup_task_thread - Memberof task finished (processed 45844 entries in 5 seconds)

######################################################
dsconf slapd-testldap plugin memberof show

dn: cn=MemberOf Plugin,cn=plugins,cn=config
cn: MemberOf Plugin
memberofattr: memberOf
memberofgroupattr: member
What does your group entry look like? Do you have objectclass that supports the `member` attribute?

Thanks.
 
nsslapd-plugin-depends-on-type: database
nsslapd-pluginDescription: memberof plugin
nsslapd-pluginEnabled: on
nsslapd-pluginId: memberof
nsslapd-pluginInitfunc: memberof_postop_init
nsslapd-pluginPath: libmemberof-plugin
nsslapd-pluginType: betxnpostoperation
nsslapd-pluginVendor: 389 Project
nsslapd-pluginVersion: 3.1.3
objectClass: top
objectClass: nsSlapdPlugin
objectClass: extensibleObject


Thank you
Isabella


--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new


--
Viktor

No comments:

Post a Comment