Re: One questions about nested gourp support of openldap

[Marc Patermann <hans.moser@ofd-z.niedersachsen.de>]

Jacky,

ctosgh schrieb (09.08.2013 10:54 Uhr):
> To meet the following requirement:
>  
> "groupA" contains user entries:
>       cn=a,ou=users,dc=test,dc=com
>       cn=b,ou=users,dc=test,dc=com
>  
> "groupB" contains "groupA"
>  
> I have following questions:
> 1 Which object classes should I use to implement above requirement? 
> Could anyone give a  simple sample ldif file?
>  
> 2 Is there a standard or commonly used way to implement nested groups?
Have you actually tried something?
It is easy.
groupOfNames' member attribute is DN style. So what ever DN you put in 
there, should work. If this DN is a "user" or a "group" does not matter.
http://ldap.akbkhome.com/index.php/objectclass/groupOfNames.html

Marc