ldap – inetOrgPerson与成员或memberOf？

假设我在ou = people,dc = example,dc = com中有inetOrgPersons.例：

dn: cn=John Doe,ou=people,dc=example,dc=com
objectClass: inetOrgPerson (structural)
objectClass: person (structural)
objectClass: top (abstract)
cn: John Doe
sn: Doe
givenName: John
mail: john.doe@example.com
uid: john.doe

另外我有几个组织：

dn: o=foo,dc=com
objectClass: organization (structural)
objectClass:top (abstract)
o: foo

dn: o=bar,dc=com
objectClass: organization (structural)
objectClass:top (abstract)
o: bar

对于每个组织,都有一个groupOfNames：

dn: cn=users,o=foo,dc=com
objectClass:groupOfNames (structural)
cn: users
member: cn=John Doe,dc=com

dn: cn=users,o=bar,dc=com
objectClass:groupOfNames (structural)
cn: users

如您所见,cn = John Doe,ou = people,dc = com被列为cn = users,o = foo,dc = com但不是dn：cn = users的成员,O =酒吧,DC =例如,DC = COM.

问题

我想要注意inetOrgPersons的会员资格.

memberOf不在我当前用于用户的模式中.是否有可用的架构提供memberOf？

member是groupOfNames的一部分,但是这个objectClass与inetOrgPerson冲突：

[LDAP: error code 65 - invalid structural object class chain (inetOrgPerson/groupOfNames)]

题

如何在cn = users,dc = com on cn = John Doe,dc = com？