Re: slapo-dynlist desgin question(s)
Quanah Gibson-Mount wrote:
> Another approach may be to view the dyngroup overlay as a proxy,
and
> just
> configure an identity for it to use. So you can explicitly give it
> access
> to whatever attributes it needs to see.
This would certainly work for me, and is I think, what I was trying to
ask for originally, except I said the rootdn, when I should have said
a proxy ID. ;) Then I could just add
access to suprivilegroup
by dyngroupID compare
and be happy.
This already you have now in HEAD. I fear you'd rather need to
add
access to suprivilegroup
by dyngroupID __READ__
and be (un)happy...
p.