Symas OpenLDAP Knowledge Base

Overlay Order

First, the memberOf overlay needs to be placed below the syncprov overlay.  The reason for this is that overlays are processed in reverse order and any overlay that writes changes to the database must process before syncprov handles the changes.