Hi, there
To meet the following requirement:
"groupA" contains user entries: cn=a,ou=users,dc=test,dc=com cn=b,ou=users,dc=test,dc=com
"groupB" contains "groupA"
I have following questions: 1 Which object classes should I use to implement above requirement? Could anyone give a simple sample ldif file?
2 Is there a standard or commonly used way to implement nested groups?
Appreciate your feedback~~~
Thanks, Jacky
Could anyone please help to take glance at it?
At 2013-08-09 16:54:17,ctosgh ctosgh@126.com wrote:
Hi, there
To meet the following requirement:
"groupA" contains user entries: cn=a,ou=users,dc=test,dc=com cn=b,ou=users,dc=test,dc=com
"groupB" contains "groupA"
I have following questions: 1 Which object classes should I use to implement above requirement? Could anyone give a simple sample ldif file?
2 Is there a standard or commonly used way to implement nested groups?
Appreciate your feedback~~~
Thanks, Jacky
ctosgh ctosgh@126.com schrieb am 12.08.2013 um 05:21 in Nachricht
4378ffbf.1f650.140708b69d7.Coremail.ctosgh@126.com:
Could anyone please help to take glance at it?
At 2013-08-09 16:54:17,ctosgh ctosgh@126.com wrote:
Hi, there
To meet the following requirement:
"groupA" contains user entries: cn=a,ou=users,dc=test,dc=com cn=b,ou=users,dc=test,dc=com
"groupB" contains "groupA"
I just guess nobody does it, because you'll need recurvice queries to resolve queries. Consider "groupB contains groupA" and "groupA contains groupB" (you can have it even less obvious).
I have following questions: 1 Which object classes should I use to implement above requirement? Could anyone give a simple sample ldif file?
Ther should be nothing special about that.
2 Is there a standard or commonly used way to implement nested groups?
See above.
Appreciate your feedback~~~
Thanks, Jacky
Jacky,
ctosgh schrieb (09.08.2013 10:54 Uhr):
To meet the following requirement:
"groupA" contains user entries: cn=a,ou=users,dc=test,dc=com cn=b,ou=users,dc=test,dc=com
"groupB" contains "groupA"
I have following questions: 1 Which object classes should I use to implement above requirement? Could anyone give a simple sample ldif file?
2 Is there a standard or commonly used way to implement nested groups?
Have you actually tried something? It is easy. groupOfNames' member attribute is DN style. So what ever DN you put in there, should work. If this DN is a "user" or a "group" does not matter. http://ldap.akbkhome.com/index.php/objectclass/groupOfNames.html
Marc
openldap-technical@openldap.org