[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Q: empty groups (groupOfNames, member)



On Mon, 09 Dec 2013 10:12:42 +0000 Liam Gretton <liam.gretton@leicester.ac.uk>
wrote
> The way I worked around this is to create new groups as groupOfNames 
> with a single empty member: attribute. It's never caused any problems 
> with any clients in my experience.

Yes, working around it with cn=dummy is possible.
Take care of config of slapo-refint.

But it's bad practice if you want to have fine-grained constraints for 'member'
to existing and active member entries.

Ciao, Michael.