Syncrepl + suffixmassage + uniqueMember

[Steffen Kaiser <vm5015995887542392v@vmail.inf.h-brs.de>]

Hi,

currently we have three OpenLDAP servers in multi-master mode and with 
MemberOf .

Currently, the base DN is dc=oldorgname,dc=de. The name of the
organization changed and all entries should be accessable through base
dc=neworgname,dc=de and all attributes with DNs as value shall return
this new base.

First I tried relay with rwm in this configuration:

dn: cn=module{1},cn=config
changetype: modify
add: olcmoduleload
olcModuleLoad: back_relay.la

dn: olcDatabase={2}relay,cn=config
changetype: add
objectClass: olcRelayConfig
olcSuffix: dc=neworgname,dc=de
olcRelay: dc=oldorgname,dc=de

dn: olcOverlay=rwm,olcDatabase={2}relay,cn=config
changetype: add
objectClass: olcRwmConfig
olcRwmRewrite: rwm-suffixmassage "dc=oldorgname,dc=de"


But this caused slapd to dump core at different entries, when I query
the whole database as administrator pulling all attributes. As this module
is "experimental", so I went another way.

Should I try another config?

Second, I tried to create a consumer server with a separate database
using and suffixmassage.

olcSyncrepl: {2}rid=004 provider=ldap://server:389/ bindmethod=simpl
 e binddn="cn=dn" credentials="pwd" s
 earchbase="dc=oldorgname,dc=de" scope=sub schemachecking=on type=re
 freshAndPersist retry="5 2 30 2 60 +" interval=00:00:00:30 timeout=0
network-time
 out=0  keepalive=0:0:0 attrs="*,+" suffixmassage="dc=neworgname,dc=de"


The sync proceeded, but I ended with uniqueMember attributes with the
old base:

dn: cn=team,ou=groups,dc=ou,dc=neworgname,dc=de
uniqueMember: uid=user,ou=peolple,dc=ou,dc=oldorgname,dc=de

The value of the attribute "member" gets rewritten into the new orgname.

Ist this a bug or intentional behaviour?

Kind regards,

--
Steffen Kaiser