Re: dynlist enhancements, ITS#9121

2019-12-18 Thread Michael Ströder
On 12/18/19 6:09 PM, Howard Chu wrote: > Howard Chu wrote: >> Quanah Gibson-Mount wrote: >>> It would be great along with all of this to finally fix memberOf >>> so it's actually functional (and replication safe) (I.e., can >>> maintain membership regardless of user/group creation order).>> >> That

Re: dynlist enhancements, ITS#9121

2019-12-18 Thread Howard Chu
Howard Chu wrote: > Quanah Gibson-Mount wrote: >> >> >> --On Monday, December 16, 2019 11:46 PM +0100 Ondřej Kuzník >> wrote: >> >>> On Mon, Dec 16, 2019 at 06:55:56PM +, Howard Chu wrote: The dynlist overlay doesn't define the memberOf attribute schema. Something else needs to do t

Re: dynlist enhancements, ITS#9121

2019-12-18 Thread Howard Chu
Ondřej Kuzník wrote: > On Wed, Dec 18, 2019 at 02:02:40AM +, Howard Chu wrote: >> Ondřej Kuzník wrote: >>> How about being able to merge identical attribute definitions whether >>> they come from config or directly from code? >> >> We've got other overlays that do something similar, ignore an e

Re: dynlist enhancements, ITS#9121

2019-12-18 Thread Howard Chu
Quanah Gibson-Mount wrote: > > > --On Wednesday, December 18, 2019 8:04 AM +0100 Ondřej Kuzník > wrote: > >> More like making it no longer an error to load the same schema twice. > > From the usage cases I've seen, we should be able to support both static > groups + old memberOf overlay and

Re: dynlist enhancements, ITS#9121

2019-12-18 Thread Quanah Gibson-Mount
--On Wednesday, December 18, 2019 8:04 AM +0100 Ondřej Kuzník wrote: More like making it no longer an error to load the same schema twice. From the usage cases I've seen, we should be able to support both static groups + old memberOf overlay and dynamic groups + dynamic memberOf concur

Re: dynlist enhancements, ITS#9121

2019-12-17 Thread Ondřej Kuzník
On Wed, Dec 18, 2019 at 02:02:40AM +, Howard Chu wrote: > Ondřej Kuzník wrote: >> How about being able to merge identical attribute definitions whether >> they come from config or directly from code? > > We've got other overlays that do something similar, ignore an error if > the schema elemen

Re: dynlist enhancements, ITS#9121

2019-12-17 Thread Howard Chu
Ondřej Kuzník wrote: > On Mon, Dec 16, 2019 at 06:55:56PM +, Howard Chu wrote: >> The dynlist overlay doesn't define the memberOf attribute schema. >> Something else needs to do that, either loading it as user-defined >> schema, or relying on the memberof overlay to already be initialized. >> >

Re: dynlist enhancements, ITS#9121

2019-12-17 Thread Howard Chu
Quanah Gibson-Mount wrote: > > > --On Monday, December 16, 2019 11:46 PM +0100 Ondřej Kuzník > wrote: > >> On Mon, Dec 16, 2019 at 06:55:56PM +, Howard Chu wrote: >>> The dynlist overlay doesn't define the memberOf attribute schema. >>> Something else needs to do that, either loading it as

Re: dynlist enhancements, ITS#9121

2019-12-16 Thread Quanah Gibson-Mount
--On Monday, December 16, 2019 11:46 PM +0100 Ondřej Kuzník wrote: On Mon, Dec 16, 2019 at 06:55:56PM +, Howard Chu wrote: The dynlist overlay doesn't define the memberOf attribute schema. Something else needs to do that, either loading it as user-defined schema, or relying on the mem

Re: dynlist enhancements, ITS#9121

2019-12-16 Thread Ondřej Kuzník
On Mon, Dec 16, 2019 at 06:55:56PM +, Howard Chu wrote: > The dynlist overlay doesn't define the memberOf attribute schema. > Something else needs to do that, either loading it as user-defined > schema, or relying on the memberof overlay to already be initialized. > > This seems like a messy l

dynlist enhancements, ITS#9121

2019-12-16 Thread Howard Chu
There's some ambiguities that still need to be resolved, around the memberOf functionality. The dynlist code only adds memberOf values for dynamic groups. It doesn't do anything about static group memberships. This implies that you still need to use the memberOf overlay too, if you want to also