[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: aci & group

Torgeir Veimo wrote:
Does in-the-tree ACIs support "dynamic groups" like config file ACLs does, as described at the bottom of the faq answer in http://www.openldap.org/faq/data/cache/52.html?

Specifically, I'm interested in maintaining a memberOf attribute on each person entry in the tree instead of using member attributes in groupOfUniqueNames. This attribute will be protected from modification by the user itself, and will be used for ACIs.

Also, is there a way of doing dynamic groups by using filter / regular expression instead of explicit multivalue member attributes?