Using dyngroup

[José Accino <accino@uma.es>]

Hello.

We are trying to get the dyngroup overlay working but without any
results until now. Just for testing, we have defined a group entry such
as"cn=faculty_users,ou=groups,dc=our,dc=domain", with a memberURL
attribute such as

 ldap:///ou=users,dc=our,dc=domain???(eduPersonAffiliation=faculty)

to get all the users with the value 'faculty' in eduPersonAffiliation 
attribute. Looking for info at the source code in overlays/dyngroup.c,
it seems that the configuration in slapd.conf should take the form:

     overlay dyngroup
     attrpair member memberURL

but although OpenLDAP restarts without error, it keeps returning the
same result when I do a search for the group, that is: no entries from
members of that group; only the group entry itself (with cn, objectClass
and memberURL attributes). Maybe I'm missing something and the use of
dyngroup overlay is a bit different...

I've been looking for further help in OpenLDAP lists and Google but a
search there for 'attrpair dyngroup' (to reduce it to the overlay
configuration) returns zero entries...

Is there anyone there using this dynamic groups overlay who could post
some info about how to configure and use it, or some pointers to get it
running?

Thanks in advance,

Jose A.