[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Using dyngroup



Jonathan Higgins a écrit :
could you provide a quick example of the configuration needed in slapd.conf for this to work properly?
This overlay takes 3 arguments : expandUrl dn attr1 attr2
 - dn : the overlay will only take effect on this dn
 - attr1 : the attribute containing the URIs to follow
 - attr2 : the attribute to collect

Here is an example :

***
# test.ldif
dn: cn=test,ou=Group,dc=test
objectClass: testGroup
cn: test
gidNumber: 9999
memberURL: ldap:///cn=test,ou=Group,o=org1,dc=test
memberURL: ldap:///cn=test,ou=Group,o=org2,dc=test

dn: cn=test,ou=Group,o=org1,dc=test
objectClass: posixGroup
cn: test
gidNumber: 9999
memberUid: bob

dn: cn=test,ou=Group,o=org2,dc=test
objectClass: posixGroup
cn: test
gidNumber: 9999
memberUid: alice
***

ldapsearch -x -b "ou=Group,dc=test" will return
dn: cn=test,ou=Group,dc=test
objectClass: testGroup
cn: test
gidNumber: 9999
memberURL: ldap:///cn=test,ou=Group,o=org1,dc=test
memberURL: ldap:///cn=test,ou=Group,o=org2,dc=test
memberUid: bob
memberUid: alice


Sébastien -- Sébastien Georget INRIA Sophia-Antipolis, Service DREAM, B.P. 93 06902 Sophia-Antipolis Cedex, FRANCE E-mail : sebastien.georget@sophia.inria.fr