Re: openLDAP & memberof

To: Gene Kupfer <kupferg@msn.com>
Subject: Re: openLDAP & memberof
From: Michael Ströder <michael@stroeder.com>
Date: Thu, 17 Apr 2008 11:46:54 +0200
Cc: openldap-technical@openldap.org
In-reply-to: <BAY101-W3692C64574FEDE82C1699FBDE50@phx.gbl>
References: <BAY101-W3692C64574FEDE82C1699FBDE50@phx.gbl>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.13) Gecko/20080313 SeaMonkey/1.1.9

Gene Kupfer wrote:

I've been doing some research and I'm finding that there is no support for a "memberof" type attribute for user objects.


Use slapo-memberof which is available in OpenLDAP 2.4.x:

http://www.openldap.org/software/man.cgi?query=slapo-memberof&sektion=5&apropos=0&manpath=OpenLDAP+2.4-Release

When I query groups that have "memberuid" attributes, I get the group
name but not the members.

Entries of object class posixGroup are not suitable for this to work. Use group entries of object class 'groupOfNames'.

Ciao, Michael.

References:
- openLDAP & memberof
  - From: Gene Kupfer <kupferg@msn.com>