Re: group in groups

[DT Piotr Wadas <pwadas@dtpw.pl>]

On Thu, 8 Apr 2010, alois blasbichler wrote:

> Hello list
> 
> We use our Openldap with a lot of applications like apache, squid, samba ...
> 
> What for us whould be very usefull is to define in ldap groups with users and
> other groups therin.
> 
> Is this possible in Ldap or maybe with the nss-module ?
> 

It is, although you should search for nss documentation, not openldap.
Anyway search for uniqueMember and memberOf attributes. Commands like 
"members" and "getent" will be helpful in diagnostics. In older versions
of libnss ( dunno which version you have ), there was an issue regarding
to order of nsswitch line , the difference between 

"group: ldap files" and "group: files ldap"

Whole stuff also generates other issues, conceptually, like recursive 
loops in nested groups and similar. But it works anyway.

Regards,
DT