[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Recursive Groups

"Mark R. Diggory" wrote:
> Pierangelo,
> > I don't think so; it could be done by adding a "recursive" flag
> > to the group membership ACL, which could cause group membership
> > check (backend_group ) being called repeatedly.
> Where can I find info on configuring this flag?

Talking in principle: we may add the flag to the __CODE__ :)

> Yes, I agree it could become a nightmare. But, I expect to have << 50 groups
> in each ldap server. So I don't think that would be too risky to try. Thanks
> for your response.

well, it'd require some hacking, and changing some backend api too.
Have a look at backend_group (servers/slapd/backend.c) and its use
in servers/slapd/acl.c.


Dr. Pierangelo Masarati               | voice: +39 02 2399 8309
Dip. Ing. Aerospaziale                | fax:   +39 02 2399 8334
Politecnico di Milano                 | mailto:masarati@aero.polimi.it
via La Masa 34, 20156 Milano, Italy   |