I know you don't like any discussions about nss_ldap on this list, but I want to
explain, why it seems that I'll need this equality matching rule:
For the implementation of nested groups per default nss_ldap uses the attributetype
uniqueMember. Without this rule I get too slow answers from the openldap server.
If the indexing support for this equality is not supported or won't be in the near future
I'll use groupOfNames instead of groupOfUniqueNames as a structural objectclass.
It contains members instead of uniqueMembers.