The memberof overlay in OpenLDAP is very useful to replicate the functionality from Active Directory where adding a new member to a group will also automatically update an attribute on the user object. But this isn't exactly the easiest nor the most well-documented thing out there, so here we are!