Univention Bugzilla – Bug 35480
Don't replicate old memberof attributes
Last modified: 2014-09-10 17:43:09 CEST
If memberof-overlay is disabled, the existing memberOf Attribute turns to an undefined attribute "MEMBEROF" which is findable as meta info (ldapsearch +).
The replication handler uses "*" and "+" as search filter, thus the join of (new) systems fails with an failed.ldif.
You could either:
1. Clean up ldap (remove MEMBEROF)
2. Don't replicate the attribute "MEMBEROF" in replication handler
Fixed, Advisory: 2014-09-04-univention-directory-replication.yaml
Why not add "MEMBEROF" to the EXCLUDE_ATTRIBUTES list?
Yes, that's better, adjusted and rebuilt.
OK - slave join with MEMBEROF
OK - 4.0
OK - YAML