Hi, I have built my ldap groups with dynlist overlay. _If i search for a group i can see the members: ldapsearch -Y EXTERNAL -b 'ou=Groups,dc=abc,dc=net' 'cn=ou-is' dn: cn=ou-is,ou=Groups,dc=abc,dc=net objectClass: groupOfURLs objectClass: fhvGroup cn: ou-is memberURL: ldap:///ou=People,dc=abc,dc=net??sub?(fhvIsAISMemberOf=cn=ou-is,ou=Groups,dc=abc,dc=net) member: uid=cb,ou=fhv,ou=People,dc=abc,dc=net _But if i search for members i only get empty results: ldapsearch -Y EXTERNAL -b 'ou=Groups,dc=abc,dc=net' '(member=uid=cb,ou=fhv,ou=People,dc=abc,dc=net)' cn member Is this not working with dynamic groups? And does it make sense to build indexes for dynamic member attributes? /thx,chris

From my low point of view your search makes no sense. :)

sorry... dn: olcOverlay={2}dynlist objectClass: olcOverlayConfig objectClass: olcDynamicList olcOverlay: {2}dynlist structuralObjectClass: olcDynamicList entryUUID: e9066598-a4df-102e-95f2-55d98beb767a creatorsName: cn=config createTimestamp: 20100203071719Z olcDlAttrSet: {0}groupOfURLs memberURL member olcDlAttrSet: {1}fhvGroup ownerURL owner entryCSN: 20100714081203.144228Z#000000#000#000000 modifiersName: cn=admin,dc=abc,dc=net modifyTimestamp: 20100714081203Z /chris On Nov 24, 2010, at 15:09 , Benjamin Griese wrote: > Hey Christian, > > you may want to post your dynlist overlay configuration. :) > > Bye. > > On Wed, Nov 24, 2010 at 14:50, Christian Bösch <boesch(a)fhv.at&gt; wrote: >> Hi, >> I have built my ldap groups with dynlist overlay. >> _If i search for a group i can see the members: >> ldapsearch -Y EXTERNAL -b 'ou=Groups,dc=abc,dc=net' 'cn=ou-is' >> dn: cn=ou-is,ou=Groups,dc=abc,dc=net >> objectClass: groupOfURLs >> objectClass: fhvGroup >> cn: ou-is >> memberURL: >> ldap:///ou=People,dc=abc,dc=net??sub?(fhvIsAISMemberOf=cn=ou-is,ou=Groups,dc=abc,dc=net) >> member: uid=cb,ou=fhv,ou=People,dc=abc,dc=net >> _But if i search for members i only get empty results: >> ldapsearch -Y EXTERNAL -b 'ou=Groups,dc=abc,dc=net' >> '(member=uid=cb,ou=fhv,ou=People,dc=abc,dc=net)' cn member >> Is this not working with dynamic groups? >> And does it make sense to build indexes for dynamic member attributes? >> /thx,chris >> >> > > > > -- > To be or not to be -- Shakespeare | To do is to be -- Nietzsche | To > be is to do -- Sartre | Do be do be do -- Sinatra

> Hi, > > I have built my ldap groups with dynlist overlay. > > _If i search for a group i can see the members: > ldapsearch -Y EXTERNAL -b 'ou=Groups,dc=abc,dc=net' 'cn=ou-is' > dn: cn=ou-is,ou=Groups,dc=abc,dc=net > objectClass: groupOfURLs > objectClass: fhvGroup > cn: ou-is > memberURL: > ldap:///ou=People,dc=abc,dc=net??sub?(fhvIsAISMemberOf=cn=ou-is,ou=Groups,dc=abc,dc=net) > member: uid=cb,ou=fhv,ou=People,dc=abc,dc=net > > _But if i search for members i only get empty results: > ldapsearch -Y EXTERNAL -b 'ou=Groups,dc=abc,dc=net' > '(member=uid=cb,ou=fhv,ou=People,dc=abc,dc=net)' cn member > > Is this not working with dynamic groups? Yes, the module is working as intended. From slapo-dynlist(5): Any time an entry with a specific objectClass is being returned, the LDAP URI-valued occurrences of a specific attribute are expanded into the corresponding entries, and the values of the attributes listed in the URI are added to the original entry. So the overlay operates on entries *returned* by a search, and thus it has nothing to do with the search filter. At the time of filtering, the dynamic values are not present in the entry, and thus cannot match.

> And does it make sense to build indexes for dynamic member attributes? No, it's pure nonsense. p.