On Mon, 2008-01-14 at 14:34 +0100, Pierangelo Masarati wrote: > Andrew Bartlett wrote: > > >> > I can un-hide it for Samba (I have code that adds a list of attributes > >> > to any query for *), but I just wanted to check there wasn't a more > >> > elegant way to do it. > > The only alternative I see consists in moving the addition of "memberOf" > to the list of attrs when it's empty, or '*' is present and either '+' > or 'extensibleObject' are absent, into slapd (again, using an overlay). Looking at this again, why is memberOf operational, or indeed special? As far as I can tell, if I do: diff -u -r1.19 memberof.c --- servers/slapd/overlays/memberof.c 11 Jan 2008 05:07:43 -0000 1.19 +++ servers/slapd/overlays/memberof.c 16 Jan 2008 05:29:39 -0000 @@ -2032,6 +2032,7 @@ { int code, i; +#if 0 for ( i = 0; as[ i ].desc != NULL; i++ ) { code = register_at( as[ i ].desc, as[ i ].adp, 0 ); if ( code ) { @@ -2041,6 +2042,7 @@ return code; } } +#endif memberof.on_bi.bi_type = "memberof"; Then it just works, and I don't have to do an extra fish for this particular operational attribute. What am I missing? Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Red Hat Inc.
Attachment:
signature.asc
Description: This is a digitally signed message part