[Date Prev][Date Next] [Chronological] [Thread] [Top]

[no subject]




Hello,

I need to know how to include a group in another group in order to the second
one inherit the access control of the first one.

In my directory I have some administration groups and groups of users too. I
want to include an existing group of users into a group of administrators, but
the members of the group of users don't inherit the permissions of the
administration group.

dn: cn=grupo_adm_canal1,ou=grupos_a,ou=administracion, o=empresa
objectclass: top
objectclass: groupOfUniqueNames
uniquemember: cn=g_adm,ou=grupos_a,ou=administracion,o=empresa
cn: grupo_adm_canal1

dn: cn=g_adm,ou=grupos_a,ou=administracion, o=empresa
objectclass: top
objectclass: groupOfUniqueNames
uniquemember: cn=adm,ou=usuarios_a,ou=administracion,o=empresa
cn: g_adm


And the slapd.conf is:

access to dn="cid=canal1,ou=canales,o=norcontrol"
by
group/groupOfUniqueNames/uniqueMember="cn=grupo_adm_canal1,ou=grupos_a,ou=administracion,o=empresa"

write

In this case, the user "cn=adm,ou=usuarios_a,ou=administracion,o=empresa"
doesn´t have access to "cid=canal1,ou=canales,o=norcontrol" .

Could you help me?

Thanks in advance.

M. Carmen