Hi ,
ok I have the answer.
Sorry for this noob's question.

De : openldap-technical <openldap-technical-bounces@openldap.org> de la part de Olivier - <piwako@outlook.fr>
Envoyé : jeudi 28 mars 2019 11:22
À : openldap-technical@openldap.org
Objet : Tree versus group
 
Hi all,
i have a stupid question but can you check this ?


When do we need to use LDAP groups versus Tree ?

I mean : I have to built a directory service.

Should I use a tree like :

dc=fr
|_dc=enterprise
  |
  |_ou=unit_1
  | |_ cn=guy_1    
  | |_ cn=guy_2    
  | |_ cn=guy_3
  |
  |_ou=unit_2
    |_cn=guy_1


Or should I use group like :


dc=fr
|_dc=enterprise
| |
| |_ou=unit_1
| |   member : dn:cn=guy_1,ou=people,dc=enterprise,dc=fr
| |   member : dn:cn=guy_2,ou=people,dc=enterprise,dc=fr
| |   member : dn:cn=guy_3,ou=people,dc=enterprise,dc=fr
| |
| |_ou=unit_2
|   member : dn:cn=guy_1,ou=people,dc=enterprise,dc=fr
|
|_dc=people
   |_ cn: guy_1
   |_ cn: guy_2
   |_ cn: guy_3


Thanks a lot guys.