[GH-ISSUE #43] memberOf overlay didn't put memberOf attributes on user records #26

Closed
opened 2026-02-27 16:47:42 +03:00 by kerem · 1 comment
Owner

Originally created by @masch712 on GitHub (Sep 8, 2022).
Original GitHub issue: https://github.com/rroemhild/docker-test-openldap/issues/43

050-openldap-populate appears to configure the memberOf overlay, then create the users and groups afterwards, but when I query my docker container for all users, I don't see a memberOf attribute on any of them.

Replication steps

  1. Run the docker container:
docker run -d --rm -p 10389:10389 -p 10636:10636 rroemhild/test-openldap
  1. Query for all users:
ldapsearch -H ldap://localhost:10389 -x -b "ou=people,dc=planetexpress,dc=com" -D "cn=admin,dc=planetexpress,dc=com" -w GoodNewsEveryone "(objectClass=inetOrgPerson)"

See that none of the users have a memberOf attribute.

Did I miss something? Sorry I'm a bit of a LDAP novice, I'm using this container to test LDAP integration from my application.

Originally created by @masch712 on GitHub (Sep 8, 2022). Original GitHub issue: https://github.com/rroemhild/docker-test-openldap/issues/43 [050-openldap-populate](https://github.com/rroemhild/docker-test-openldap/blob/f9e5ef62d0d647b46ccd8e879f0228f26add23e5/rootfs/etc/cont-init.d/050-openldap-populate) appears to configure the memberOf overlay, _then_ create the users and groups afterwards, but when I query my docker container for all users, I don't see a `memberOf` attribute on any of them. ## Replication steps 1. Run the docker container: ``` docker run -d --rm -p 10389:10389 -p 10636:10636 rroemhild/test-openldap ``` 2. Query for all users: ``` ldapsearch -H ldap://localhost:10389 -x -b "ou=people,dc=planetexpress,dc=com" -D "cn=admin,dc=planetexpress,dc=com" -w GoodNewsEveryone "(objectClass=inetOrgPerson)" ``` See that none of the users have a memberOf attribute. Did I miss something? Sorry I'm a bit of a LDAP novice, I'm using this container to test LDAP integration from my application.
kerem closed this issue 2026-02-27 16:47:42 +03:00
Author
Owner

@masch712 commented on GitHub (Sep 14, 2022):

Ah, it appears that memberOf is an "Operational Attribute", so I need to append the "+" argument to my ldapsearch command.
This command returns the memberOf attribute:

ldapsearch -H ldap://localhost:10389 -x -b "ou=people,dc=planetexpress,dc=com" -D "cn=admin,dc=planetexpress,dc=com" -w GoodNewsEveryone "(objectClass=inetOrgPerson)" "+"
<!-- gh-comment-id:1246092862 --> @masch712 commented on GitHub (Sep 14, 2022): Ah, it appears that `memberOf` is an "Operational Attribute", so I need to append the `"+"` argument to my `ldapsearch` command. This command returns the `memberOf` attribute: ```bash ldapsearch -H ldap://localhost:10389 -x -b "ou=people,dc=planetexpress,dc=com" -D "cn=admin,dc=planetexpress,dc=com" -w GoodNewsEveryone "(objectClass=inetOrgPerson)" "+" ```
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/docker-test-openldap#26
No description provided.