thanks a lot! Carlo

2010/4/8 masarati@aero.polimi.it

...

Hi, I would like to link an attribute to an object, so that when I perform a search it returns all attributes related to the object referenced, just like the example below:

• resource1

  • type: this_type
  • permission: this_permission
  • location: this_location

• resource2

  • type: another_type
  • permission: another_permission
  • location: another_location

• profile1

  • resource1
  • resource2

• domain

  • organization
    • user1
      • profile1

ldapsearch [ options ] cn=user1 dc: domain o: organization cn: user1 ( profile: profile1 ) resource: resource1, this_type, this_permission, this_location resource: resource2, another_type, another_permission, another_location

The LDAP data model does not support anything like that. It needs to be implemented programmatically (i.e. client-side). OpenLDAP does not implement any extension like that (AFAIK). It could be implemented in form of an overlay, though.

p.