Forum: 

OpenLDAP- Looking for help with memberof overlay

Mustafa Hashmi's picture

Hey there,

 

great product, took mere minutes to get up and running creating users+groups. Would love for you to include a GUI driven feature to enable memberof functionality which is required by many number of integrations. At this time would like a easy step-by-step method of turning this on in Turnkey's version. There are a log of guide out there but they generally are over complicated and refer to vanilla installs. 

 

Would love some help.

 

Thanks

Jonathan Struebel's picture

The following steps will allow you to enable the memberof overlay functionality on the OpenLDAP appliance. They will all have to be done from the console since the current permissions don't allow them to be done from the GUI. I still haven't figured out the right settings to keep the config secure but still allow all settings to be modified from the GUI.

First type the following command to enable the memberof module:

ldapmodify -Y EXTERNAL -H ldapi:/// <<EOL
dn: cn=module{0},cn=config
add: olcModuleLoad
olcModuleLoad: memberof
EOL

Second type the following command to configure OpenLDAP to use the memberof module:

ldapadd -Y EXTERNAL -H ldapi:/// <<EOL
dn: olcOverlay={0}memberof,olcDatabase={1}hdb,cn=config
objectClass: olcConfig
objectClass: olcOverlayConfig
olcOverlay: memberof
EOL

 

Finally type the following command to ensure OpenLDAP reloads the configuration (this step may not be strictly necessary due to the way the configuration is stored but it doesn't hurt anything and ensures your using the latest config):

service slapd restart

 

 

Post new comment