Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I set up the memberOf overlay for OpenLDAP - how do I change the memberOf attribute name?

I want to change it to "isMemberOf".

I tried changing this attribute in the configuration

olcMemberOfMemberOfAD: isMemberOf

but ldapadd failed:

ldap_add: Other (e.g., implementation specific) error (80)
    additional info: unable to find memberof attribute="isMemberOf":
attribute type undefined (17)

Any ideas?

share|improve this question

You have to use an attribute that actually exists in the schema.

share|improve this answer
Where is memberOf actually defined in the LDAP schema? I don't see it in any of the files under /etc/ldap/ - if it were, I could change it? I thought the whole point is memberOf isn't a real schema attribute, which is why it has to be explicitly requested (operational attribute). Since the memberOf overlay attribute is supposed to be configurable, what else needs to be changed to use that olcMemberOfMemberOfAD option? – wrschneider Sep 13 '12 at 13:25
@wrschneider99 It appears when I browse my schema. Don't know where it came from. Why do you think you need to change it? – EJP Sep 15 '12 at 0:25
compatibility with code that is running on Sun Java Directory Server and expects isMemberOf – wrschneider Sep 15 '12 at 18:14

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.