Carlos Santos wrote: > So, the situation is the following: I have a dynamic group (objectClass: > groupOfURLs) and on my ldap filter I fetch the users UID. When I access the > content of the group, there are a set of members there, one of them is > testUser1, but when I search for (&(objectClass=groupOfURLs)(uid=testUser1)) > the search result is empty. > > However when I search for an attribute which is native to the class, such as > owner, the search returns the group. > > Is it possible for an ldap search to return the dynamic groups a user belongs to? Not really. man slapo-dynlist says: -------------------------------- snip -------------------------------- Since the resulting entry is dynamically constructed, it does not exist until it is constructed while being returned. As a consequence, dynamically added attributes do not participate in the filter matching phase of the search request handling. In other words, filtering for dynamically added attributes always fails. -------------------------------- snip -------------------------------- Ciao, Michael.
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature