Re: More on dynamic group searches

[Howard Chu <hyc@symas.com>]

Ian Collins wrote:
> On 05/23/10 09:21 PM, Howard Chu wrote:
> > Don't use dynamic groups then. Use autogroups.
> Is there any documentation of autogroup or how to debug it?
>
> I've read the README, build the module and updated my config thus:
>
> dn: cn={8}dyngroup,cn=schema,cn=config
> <stuff>
> olcObjectClasses: {0}( NetscapeLDAPobjectClass:33 NAME 'groupOfURLs' SUP
> top S
>    TRUCTURAL MUST cn MAY ( memberURL $ businessCategory $ description $ o
> $ ou $
>      owner $ seeAlso $ member ) )
>
> dn: cn=module{1},cn=config
> objectClass: olcModuleList
> cn: module{1}
> olcModulePath: /opt/local/libexec/openldap
> olcModuleLoad: {0}dynlist.la
> olcModuleLoad: {1}memberof.la
> olcModuleLoad: {2}auditlog.la
> olcModuleLoad: {3}autogroup.la
>
> dn: olcOverlay={2}autogroup,olcDatabase={1}hdb,cn=config
> objectClass: olcOverlayConfig
> objectClass: olcAutomaticGroups
> olcOverlay: {2}autogroup
> olcAGattrSet: {0}groupOfURLs memberURL member
>
> But it doesn't appear to be working.

What have you done to test it? As the README says, it operates when a write 
operation occurs that may affect the membership of a given group.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/