Erik de Waard wrote:
> As taken from elsewhere on this list:
> 
> The primary issue is that if a server goes into REFRESH mode, the order in which the entries are sent back may not allow the slapo-memberOf overlay to rebuild
> the groups correctly.
> 
> Details:
> https://bugs.openldap.org/show_bug.cgi?id=8613

See
https://bugs.openldap.org/show_bug.cgi?id=10167

that restriction has been eliminated.

-- 
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/