Michael Ströder wrote:
Would deploying slapo-refint be of help here?Yes, slapo-memberof(5) does not consider the possibility of a subtree rename, and thus takes no care of it.
Could be. Did you try, by chance?
Ciao, Michael.
------------------- snip ------------------- Excerpt of slapd.conf:
overlay memberof memberof-refint true
# Referential integrity checking overlay refint refint_attributes member manager owner seeAlso roleOccupant refint_nothing cn=dummy