[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#8569) manpage for autogroup

This is a multi-part message in MIME format.

Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Patch attached

Emily Backes
Symas Corporation
desk   +1 650 963 7603
mobile +1 818 620 9879

Content-Type: text/x-diff;
Content-Disposition: attachment;
Content-Transfer-Encoding: quoted-printable

>From b5599bce0189aaae4631b196720b69e9d8b54639 Mon Sep 17 00:00:00 2001
From: Emily Backes <ebackes@symas.com>
Date: Mon, 16 Jan 2017 12:59:52 -0800
Subject: [PATCH] Add a manpage for slapo-autogroup

 contrib/slapd-modules/autogroup/slapo-autogroup.5 | 102 ++++++++++++++++++=
 1 file changed, 102 insertions(+)
 create mode 100644 contrib/slapd-modules/autogroup/slapo-autogroup.5

diff --git a/contrib/slapd-modules/autogroup/slapo-autogroup.5 b/contrib/sl=
new file mode 100644
index 0000000000..1d68a55d8a
--- /dev/null
+++ b/contrib/slapd-modules/autogroup/slapo-autogroup.5
@@ -0,0 +1,102 @@
+.\" Copyright 1998-2017 \[u00A9] The OpenLDAP Foundation, All Rights Reser=
+.\" Portions Copyright \[u00A9] 2007 Micha=C5=82 Szulczy=C5=84ski.
+.\" Copying restrictions apply.  See the COPYRIGHT file.
+.\" $OpenLDAP$
+\FCslapo-autogroup\FT \- automatic updates of group memberships which meet=
+requirements of any filter contained in the group definition.
+In \FCslapd.conf\FT:
+ ...
+ \FCinclude ETCDIR/schema/dyngroup.schema\FT
+ ...
+ \FCmoduleload autogroup.so\FT
+ ...
+ \FCdatabase\FT ...
+ ...
+ \FCoverlay autogroup\FT
+ \FCautogroup-attrset groupOfURLs memberURL member\FT
+.B autogroup
+overlay to
+.BR slapd (8)
+allows automated updates of group memberships which meet the requirements
+of any filter contained in the group definition. The filters are built from
+LDAP URI-valued attributes. Any time an object is added/deleted/updated, i=
t is
+tested for compliance with the filters, and its membership is accordingly
+updated. For searches and compares, it behaves like a static group.
+If the attribute part of the URI is filled, the group entry is populated by
+the values of this attribute in the entries resulting from the search.
+.BR \FCslapd.conf\FT (5)
+or the \FCcn=3Dconfig\FT methodology of
+.BR \FCslapd-config\FT (5)
+may be used for configuring autogroup.  Both syntaxes are provided
+here for convenience:
+.B \FCautogroup-attrset\FT <group-oc> <URL-ad> <member-ad>
+.B \FColcAGattrSet:\FT <group-oc> <URL-ad> <member-ad>
+This defines the objectclass-attribute-URI mappings defining the
+automatically managed groups, and may appear multiple times.
+The value <group-oc> is the name of the objectClass that represents
+the group.
+The value <URL-ad> is the name of the attributeDescription that
+contains the URI that is converted to the filters. If no URI is
+present, there will be no members in that group. It must be a subtype
+of labeledURI.
+The value <member-ad> is the name of the attributeDescription that
+specifies the member attribute. User modification of this attribute is
+disabled for consistency.
+.B \FCautogroup-memberof-ad\FT <memberof-ad>
+.B \FColcAGmemberOfAd\FT <memberof-ad>
+This defines the attribute that is used by the memberOf overlay to
+store the names of groups that an entry is member of; it must be
+DN-valued. It should be set to the same value as
+memberof-memberof-ad. It defaults to 'memberOf'.
+As above in SYNOPSIS, or with memberof:
+ ...
+ \FCinclude ETCDIR/schema/dyngroup.schema\FT
+ \FCinclude ETCDIR/schema/memberof.schema\FT
+ ...
+ \FCmoduleload autogroup.so\FT
+ \FCmoduleload memberof.so\FT
+ ...
+ \FCdatabase\FT ...
+ ...
+ \FCoverlay memberof\FT
+ \FCmemberof-memberof-ad\FT foo
+ ...
+ \FCoverlay autogroup\FT
+ \FCautogroup-attrset groupOfURLs memberURL member\FT
+ \FCautogroup-memberof-ad\FT foo
+As with static groups, update operations on groups with a large number
+of members may be slow. If the attribute part of the URI is specified,
+modify and delete operations are more difficult to handle. In these
+cases the overlay will try to detect if groups have been modified and
+then simply refresh them. This can cause performance hits if the
+search specified by the URI deals with a significant number of
+This module was originally written in 2007 by Micha=C5=82
+Szulczy=C5=84ski.  Further enhancements were contributed by Howard
+Chu, Raphael Ouazana, Norbert Pueschel, and Christian Manal.  Manpage
+updates provided by Emily Backes.
+.BR slapd.conf (5),
+.BR slapd (8).
+.SH Copyrights
+Copyright \[u00A9] 1998-2017 The OpenLDAP Foundation.
+Portions Copyright \[u00A9] 2007 Micha=C5=82 Szulczy=C5=84ski.
+All rights reserved.