summaryrefslogtreecommitdiffstats
path: root/roles/LDAP-provider/files/etc/ldap/dynlist.ldif
blob: df9a806ee8aae461f6bd05c607c2f41f099e70ab (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
# References:
# - https://www.openldap.org/doc/admin24/overlays.html#Dynamic%20Lists
# - man 5 slapo-dynlist

# TODO bookworm (slapd 2.5)
# “The dynlist overlay has been reworked with the 2.5 release to use a
# consistent namespace as with other overlays. As a side-effect the
# following cn=config parameters are deprecated and will be removed in a
# future release: olcDlAttrSet is replaced with olcDynListAttrSet
# olcDynamicList is replaced with olcDynListConfig”
#
# XXX that didn't solve the spaming from nextcloud's user_ldap plugin,
# so we disable activity mails for “Your group memberships were
# modified“ for now.  See also
#
#   https://github.com/nextcloud/server/issues/42195
#   https://github.com/nextcloud/server/issues/29832
#
# TODO bookworm: use “dynlist-attrset groupOfURLs memberURL
# member+memberOf@groupOfNames” to also populate memberOf
#
dn: olcOverlay=dynlist,olcDatabase={*}mdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcDynamicList
olcOverlay: dynlist
olcDlAttrSet: groupOfURLs memberURL member