Am 03.02.2011 21:46, schrieb ian+openldap@comtek.co.uk:

Is there a recommended, 'production' way to inherit certain attributes from a group? Perhaps some kind of overlay?

For example, if a user is in the 'users' group and the users group has the attribute userQuota=100 then the user will appear to have userQuota=100.

If, on the other hand, userQuota=200 is set on the user then that would override the current value.

Thanks for any suggestions.

Ian

Hi,

I would approach this on application level. Get the user object and check for the userQuota attribute; if it's empty or not present, go for the group(s). Or the other way around; get the attribute from the group, then check all members for individual overrides.

Regards, Christian Manal