[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#5761) More flexible dynlist configuration desirable



Full_Name: Guillaume Rousse
Version: 2.4.11
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (193.55.250.67)


Dynlist overlay only accept a single configuration directive for the whole base,
preventing to map differently the request URL depending on the context.

For including users into groups with such URL as
ldap:///ou=users,dc=domain,dc=tld??sub?(gidNumber=X), you need 
dynlist-attrset groupOfURLs memberURL member

For including groups into other groups, with such URL as
ldap:///ou=group,dc=domain,dc=tld?member?sub?(cn=Y), you need
dynlist-attrset groupOfURLs memberURL

It would be practical to add a switch for this directive, allowing to restrict
its application to a specific context. Pierangelo suggested something as:

dynlist-attrset <group-oc> <URL-ad>
        [ ldap:///base??scope?filter ]
        [[<mapped-ad>:]<member-ad> ...]

Which would turn previous examples into:
dynlist-attrset groupOfURLs memberURL
        ldap:///ou=users,dc=domain,dc=tld??sub?(gidNumber=X) 
        member
dynlist-attrset groupOfURLs memberURL
        ldap:///ou=group,dc=domain,dc=tld??sub?(cn=Y)