[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Recursive Groups

To: "Mark R. Diggory" <mdiggory@latte.harvard.edu>
Subject: Re: Recursive Groups
From: Pierangelo Masarati <masarati@aero.polimi.it>
Date: Fri, 26 Oct 2001 17:41:47 +0200
Cc: openldap-software@OpenLDAP.org
Organization: Dipartimento di Ingegneria Aerospaziale
References: <00ad01c15dfb$8d7257a0$6401a8c0@euphoria> <3BD92F53.CDCCE91D@aero.polimi.it> <001401c15e31$60cdc0f0$ded4f78c@ENTILZHA>

"Mark R. Diggory" wrote:
> 
> Pierangelo,
> 
> > I don't think so; it could be done by adding a "recursive" flag
> > to the group membership ACL, which could cause group membership
> > check (backend_group ) being called repeatedly.
> 
> Where can I find info on configuring this flag?

Talking in principle: we may add the flag to the __CODE__ :)

> Yes, I agree it could become a nightmare. But, I expect to have << 50 groups
> in each ldap server. So I don't think that would be too risky to try. Thanks
> for your response.

well, it'd require some hacking, and changing some backend api too.
Have a look at backend_group (servers/slapd/backend.c) and its use
in servers/slapd/acl.c.

Pierangelo.

-- 
Dr. Pierangelo Masarati               | voice: +39 02 2399 8309
Dip. Ing. Aerospaziale                | fax:   +39 02 2399 8334
Politecnico di Milano                 | mailto:masarati@aero.polimi.it
via La Masa 34, 20156 Milano, Italy   |
http://www.aero.polimi.it/~masarati

References:
- Recursive Groups
  - From: "Mark R. Diggory" <m.diggory@verizon.net>
- Re: Recursive Groups
  - From: Pierangelo Masarati <masarati@aero.polimi.it>
- Re: Recursive Groups
  - From: "Mark R. Diggory" <mdiggory@latte.harvard.edu>

Prev by Date: RE: Get Max uidNumber ...
Next by Date: Re: System user names in OpenLDAP with all digits: problem?
Index(es):
- Chronological
- Thread