[Date Prev][Date Next]
RE: buid dynamic groups
I'm also interested in this topic because I strongly believe that handling
access management by group it really a pain and dynamic group will be a best
approach. However, it might be difficult because most of the LDAP client do
not support LDAP query to emulate group membership. And I think there is
also a performance issue here.
I was thinking of another option. It could be easier to build a dynamic
group using batch jobs that will perform the LDAP lookup you desire and
create "classical" LDAP groups that can be used by client applications.
If anybody has a another idea I will be glad to share my views.
From: Pierre Baridon [mailto:email@example.com]
Sent: mardi 21 mai 2002 10:15
Subject: buid dynamic groups
i would like to build dynamic groups without having to maintain a list of
member in the group.
is it possible to put an ldap url in the value of an attribute to get for
example a list of uid matching some criterias ?