Re: Dynamic Groups

[Peter Marschall <peter@adpm.de>]

Hi,

On Friday 30 May 2003 19:32, Michael Ströder wrote:
> Michael Ströder wrote:
> >> No, dynamic groups are purely server-sided. To the client they appear
> >> as a regular groupOfNames or groupOfUniqueNames with member or
> >> uniqueMember
> >> attributes.
> >
> > ???
>
> Well, as usual it depends... ;-)
> With Netscape 6.x / iPlanet / Sun One it's client-side.

I didn't know that.

Does that mean the server is passive and simply holds that object
and the client needs to search the group object and then evaluate the
filter in it to get a list of DNs / the information whether a DN is in the 
list of DNs ?

Since I only know the Novell variant, can you shed some light on the
Netscape 6.x / iPlanet / Sun One variant ?

If this variant is client-side shouldn't any LDAPv3 server support it ?

> >> I.e. on the server side it may look like
> >> dn: cn=finance,ou=groups,o=company
> >> objectclass: dynamicGroupOfNames
> >> cn: finance
> >> searchUri: ldap:///dc=foo,dc=org??sub?(ou=finance)
> >> to the client it looks like
> >> dn: cn=finance,ou=groups,o=company
> >> objectclass: groupOfNames
> >> cn: finance
> >> member: cn= joe beancounter,ou=people,o=company
> >> member: cn=jane beancountress,ou=people,o=company
> >
> > On which server does that work?
>
> Ok, checked with ldap://www.nldap.com and experimented with a test entry of
> object class 'dynamicGroup'.
>
> You can check yourself:
> http://www.stroeder.com/cgi-bin/web2ldap.fcgi?ldap://www.nldap.com/cn=Dynam
>ic%20Group%20Test,ou=Groups,ou=web2ldap,ou=user,o=NOVELL

I know !

> >> AFAIK it is an idea implemented by at least one vendor I know.
> > Which one?
>
> Novell eDirectory.

Correct !
It's a quite recent addition: it came in version 8.6 or 8.7 


Peter


-- 
Peter Marschall
eMail: peter@adpm.de