Hi,

I have an ldap directory tree with a lot of organizational units.

For each of these OUs I set one or multiple "myManager" attributes having as value the DN of the users I want to.

I have set dynlist in order to have an attribute myManagerOf on every user object.

Now, with one search, I would like to have all the manager "(myManagerOf=*)". But substring filter does not work. Only equality as far as I understand.

Of course, as I read in some different topics, it is not feasible using dynlist.

I thought that the overlay autogroup would help on that point but at this stage, I'm not able to make it working.

Here is my autogroup config so far: dn: olcOverlay={4}autogroup,olcDatabase={1}mdb,cn=config objectClass: olcOverlayConfig objectClass: olcAutoGroupConfig olcOverlay: {4}autogroup olcAutoGroupAttrSet: myOrganizationalUnit memberUrl myManager olcAutoGroupMemberOfAd: myManagerOf

I tried to play with this autogroup config and dynlist one, but since I added autogroup, no way to change the myManager attribute, I always face an error. Which I don't have without autogroup:

ldap_modify: Constraint violation (19)     additional info: attempt to modify dynamic group member attribute

If autogroup considers that only "memberUrl" can touch myManager attribute then it sounds logical.

However, how could I achieve my goal then ?