[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: buid dynamic groups

Salut Pierre, 

I'm also interested in this topic because I strongly believe that handling
access management by group it really a pain and dynamic group will be a best
approach. However, it might be difficult because most of the LDAP client do
not support LDAP query to emulate group membership. And I think there is
also a performance issue here. 

I was thinking of another option. It could be easier to build a dynamic
group using batch jobs  that will perform the LDAP lookup you desire and
create "classical" LDAP groups that can be used by client applications. 

If anybody has a another idea I will be glad to share my views.


-----Original Message-----
From: Pierre Baridon [mailto:pbaridon@custsv.univ-bpclermont.fr]
Sent: mardi 21 mai 2002 10:15
To: openldap-software@OpenLDAP.org
Subject: buid dynamic groups


i would like to build dynamic groups without having to maintain a list of 
member in the group.

is it possible to put an ldap url in the value of an attribute to get for 
example a list of uid matching some criterias ?