This definition would imply that Dynamic Groups are a concept that only clients care about, since presumably a client must issue a search on the LDAP URL that defines the group.
No, dynamic groups are purely server-sided. To the client they appear as a regular groupOfNames or groupOfUniqueNames with member or uniqueMember
attributes.
???
I.e. on the server side it may look like dn: cn=finance,ou=groups,o=company objectclass: dynamicGroupOfNames cn: finance searchUri: ldap:///dc=foo,dc=org??sub?(ou=finance) to the client it looks like dn: cn=finance,ou=groups,o=company objectclass: groupOfNames cn: finance member: cn= joe beancounter,ou=people,o=company member: cn=jane beancountress,ou=people,o=company
On which server does that work?
AFAIK it is an idea implemented by at least one vendor I know.
Which one?
Ciao, Michael.