[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: "memberof" function for memberUid attribute.



Dear Mr. Michael

Thank you very much for your respond.

So, what your recommended ways that i have to do Sir?

Best regards,

2015-10-30 3:24 GMT-07:00 Michael Ströder <michael@stroeder.com>:
Andi Zulfadli wrote:
> What is the format for filter the member of group?
>
> we know that "memberof" format works in member attribute in openldap group
> entry format.
>
> example attribute :
>
> dn: cn=Admins,ou=Users,o=<org-id>,dc=jumpcloud,dc=com
>
> *member: uid=john,ou=Users,o=<org-id>,dc=jumpcloud,dc=commember:
> uid=mary,ou=Users,o=<org-id>,dc=jumpcloud,dc=com*objectClass: top
> objectClass: groupOfNames
> description: tagGroup
> cn: Admins
> ou: Admins
>
> example filter :
> example:
> (&(objectClass=person)(memberOf=CN=name-of-the-group,OU=xample,DC=com))
>
> But how about if my openldap group member attribute using memberUid as
> attibute member's group.
>
> dn: cn=Admins,ou=Users,o=<org-id>,dc=jumpcloud,dc=com
>
>
> *memberUid: johnmemberUid: mary*objectClass: top
> objectClass: groupOfNames
> description: tagGroup
> cn: Admins
> ou: Admins
>
> How can i use "memberof" filter format in my openLDAP?

As slapo-memberof(5) clearly states: It works only with DN-syntax attributes.

You could add a custom attribute to your member entries and maintain this to
reflect all the group memberships. But I'd strongly recommend to not do it.

Ciao, Michael.