dynlist, memberof,and authentication

[Richard Pijnenburg <richard@softwaredev.nl>]

Hi all,

I've created a group with the dynlist overlay to create dynamic groups.
Now i want to implement authentication with it but seem to be unable to 
search on it with nss-pam-lib or sssd.

Before i start configuring all that stuff i wanted to see what 
search/filter string i need to make and been playing around to get the 
member.

When i search with base the dynamic group i get all the members/

# ldapsearch -x -b 'cn=prod,ou=isp,ou=acl,dc=ispavailability,dc=com'

dn: cn=prod,ou=isp,ou=acl,dc=ispavailability,dc=com
objectClass: groupOfURLs
cn: prod
memberURL: 
ldap:///cn=sysadmin,ou=isp,ou=groups,dc=ispavailability,dc=com?memb
 er?sub?
member: uid=richard,ou=people,dc=ispavailability,dc=com

So i thought i'll create a search string for the cn and the member.

# ldapsearch -x 
'(&(cn=prod)(member=uid=richard,ou=people,dc=ispavailability,dc=com))'

And i get nothing....



So i thought about using the memberof overlay with it.

# ldapsearch -x uid=richard memberof

I get the static group trough the memberof overlay but not the dynamic 
group.
Am i missing something or am i trying to do something that's simply not 
possible?

Cheers.

Richard