ehlo,
There is problem with OpenLDAP server and dereferencing of attributes that is not in the schema of the server?
sh-4.2$ ldapsearch -x -LLL -h openldap.server.test -b 'dc=example,dc=com' \ -E 'deref=member:uid,dummy_attr' cn=ref_grp Protocol error (2) Additional information: Dereference control: attribute decoding error sh-4.2$ echo $? 2
The attribute nsUniqueID is a 389-only, non-standard attribute. It is an operational attribute that is not in the rfc2307bis nor inetOrgPerson nor posixAccount schema. OpenLDAP supports the standard entryUUID attribute, which is basically the same (uniquely identifies an entry throughout a replication topology), but uses the standard UUID format rather than the non-standard format used by 389.
4x FIXME removed :-)
Any comments are welcomed.
LS