Re: One questions about nested gourp support of openldap

Jacky,

ctosgh schrieb (09.08.2013 10:54 Uhr):

To meet the following requirement:

"groupA" contains user entries: cn=a,ou=users,dc=test,dc=com cn=b,ou=users,dc=test,dc=com

"groupB" contains "groupA"

I have following questions: 1 Which object classes should I use to implement above requirement? Could anyone give a simple sample ldif file?

2 Is there a standard or commonly used way to implement nested groups?

Have you actually tried something? It is easy. groupOfNames' member attribute is DN style. So what ever DN you put in there, should work. If this DN is a "user" or a "group" does not matter. http://ldap.akbkhome.com/index.php/objectclass/groupOfNames.html

Marc