Re: Trouble enabling memberof plugin

Mark Reynolds <mareynol@xxxxxxxxxx> · Tue, 08 Sep 2015 15:12:10 -0400



    On 09/08/2015 03:06 PM, Craig Setera
      wrote:

    
                Mark,

                  
                  Thanks for getting back to me.  Hopefully the
                  following will help.

                  
                  [root@62ca40b09276 /]# rpm -qa 389-ds-base

                  389-ds-base-1.2.11.15-60.el6.x86_64

                  
                In case it matters, I'm running CentOS 6.6 inside of
                Docker:

                
                [root@62ca40b09276 /]# uname -a

                Linux 62ca40b09276 4.0.9-boot2docker #1 SMP Thu Aug 13
                03:05:44 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

                
              I'm using the following LDIF entries to enable the plugin:

              
              dn: cn=MemberOf Plugin,cn=plugins,cn=config

              changetype: modify

              replace: nsslapd-pluginEnabled

              nsslapd-pluginEnabled: on

              -

              replace: memberofgroupattr

              memberofgroupattr: uniqueMember

              -

              replace: memberofattr

              memberofattr: memberOf

              
    Hi Craig,

    
    Did you restart the server after making the above config changes? 
    You need to.

    
    Do you have an objectclass present in the member entry that allows
    the "memberOf" attribute?  Like "inetUser".  

    
    Are you adding a "uniqueMember" attribute to a group(and not the
    "member" attribute)?

    
    Mark

    
          Even after running the fixup task, I wasn't seeing any
            updates to the member attributes.  I enabled plugin logging
            and didn't see any entries from the memberof plugin
            whatsoever, which I found very strange.  When I was having
            issues trying to get the roles plugin working correct, I was
            at least getting error messages in the logs that helped me
            troubleshoot.

            
          Thanks again,

        
        Craig

        
          On Tue, Sep 8, 2015 at 1:58 PM, Mark
            Reynolds <mareynol@xxxxxxxxxx>
            wrote:

            
               Craig,

                
                Full version of 389?   rpm -qa | grep 389-ds-base

                
                You might need to restart the server after enabling the
                plugin, but how exactly are you "enabling" the plugin
                though?  ldapmodify?  Editing dse.ldif?  

                
                Can you provide your plugin config entry, and what you
                are doing where the plugin seems to not be working?

                
                Mark
                
                  
                    On 09/08/2015 01:51 PM, Craig Setera wrote:

                    
                          I'm attempting to enable the memberof
                            plugin in version 1.2.11 on CentOS 6.x. 
                            Unfortunately, it don't seem to be able to
                            get the plugin enabled and functioning. 
                            With plugin logging enabled, I see other
                            plugins logging their startup and
                            functionality, while I see nothing from the
                            memberof plugin despite having enabled it in
                            the configuration.  I've tried a variety of
                            different logging levels and configurations,
                            but it just doesn't seem like the code is
                            firing at all.  Can anyone suggest what I
                            might be doing wrong or how to further
                            diagnose the issues?  

                            
                          Thanks,

                        
                        Craig

                        
                                -- 

                                
                                    Craig

                                      
                      --
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
                    
                
              --

              389 users mailing list

              389-users@xxxxxxxxxxxxxxxxxxxxxxx

              https://admin.fedoraproject.org/mailman/listinfo/389-users

            
      --
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
    
    
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users