[Date Prev][Date Next]
Re: slapo-dynlist search member=value search?
Aleksander Adamowski wrote:
I imagined that OpenLDAP maintained a cache for dynamic groups (that's
how I understood "this exploits slapd group caching capabilities" in the
FAQ) in order to do a search on (member=member'sDN).
Note that the FAQ statement that you misquoted actually says:
For compare operations on the member attribute, all the values of the
memberURL attribute of groupOfURLs objects are compared until a match is found;
this exploits slapd group caching capabilities.
I.e., this only applies to the LDAP Compare operation, not to Search
operations. Frankly the mention of slapd group caching here is bogus, since
group caching only benefits ACL performance when processing multiple responses
in a Search operation.
-- Howard Chu
Chief Architect, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/