Section Number and Name:
8.1.5. Automatically Adding Entries to Specified Groups
Feature: Allow the Auto membership plugin to work with Modify operations (previously it was only invoked on ADD operations)
Reason: The membership integrity was not properly maintained when the filter criteria changed in the user entry. The rebuild task was not enough to remove the user from groups that they no longer belonged to.
Result: When user entry is changed, and that change impacts what automembership groups they belong to the user is not removed from the old group and added to the new group automatically.
This is the new default behavior, but it can be turned off by setting "autoMemberProcessModifyOps" to "off" in the plugin entry: cn=Auto Membership Plugin,cn=plugins,cn=config
Design Doc: https://www.port389.org/docs/389ds/design/automember-postop-modify-design.html