Andi Zulfadli wrote:
What is the format for filter the member of group?
we know that "memberof" format works in member attribute in openldap group entry format.
example attribute :
dn: cn=Admins,ou=Users,o=<org-id>,dc=jumpcloud,dc=com
*member: uid=john,ou=Users,o=<org-id>,dc=jumpcloud,dc=commember: uid=mary,ou=Users,o=<org-id>,dc=jumpcloud,dc=com*objectClass: top objectClass: groupOfNames description: tagGroup cn: Admins ou: Admins
example filter : example: (&(objectClass=person)(memberOf=CN=name-of-the-group,OU=xample,DC=com))
But how about if my openldap group member attribute using memberUid as attibute member's group.
dn: cn=Admins,ou=Users,o=<org-id>,dc=jumpcloud,dc=com
*memberUid: johnmemberUid: mary*objectClass: top objectClass: groupOfNames description: tagGroup cn: Admins ou: Admins
How can i use "memberof" filter format in my openLDAP?
As slapo-memberof(5) clearly states: It works only with DN-syntax attributes.
You could add a custom attribute to your member entries and maintain this to reflect all the group memberships. But I'd strongly recommend to not do it.
Ciao, Michael.