Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The system log on my Openfire + OpenLDAP installation is getting flooded with this message:

slap_global_control: unrecognized control: 1.2.840.113556.1.4.473

This means that Openfire wants OpenLDAP to do server-side sorting, which OpenLDAP doesn't support. The Openfire LDAP Guide advises to set the property ldap.clientSideSorting to true in this case.

Unfortunately, Openfire doesn't find any user accounts in LDAP anymore if I do that. How do I make this work?

share|improve this question

Sounds like the slap-valsort(5) overlay.

I haven't used it myself but the Audit Logging, Dynamic Groups and Reverse Group Membership Maintenace weren't too much of a hassle to set up, so you might want to give it a try.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.