[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Member of nested groups of different classes

To: Chris <chris2014@postbox.xyz>, openldap-technical@openldap.org
Subject: Re: Member of nested groups of different classes
From: Howard Chu <hyc@symas.com>
Date: Fri, 12 Feb 2016 16:23:25 +0000
In-reply-to: <61c7877234b24e523ac54ab3101cf1bc.squirrel@mail2.postbox.xyz>
References: <61c7877234b24e523ac54ab3101cf1bc.squirrel@mail2.postbox.xyz>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0 SeaMonkey/2.42a1

Chris wrote:

Dear All,

some users are member of a groupOfNames (RFC2307bis Schema). This group is
member of a mailGroup (Postfix Schema). This mailGroup is member of
another mailGroup. (Nested) membership in this last group defines access
rights for an application.

My question: is the memberOf overlay able to recursively find all groups


No. The memberof overlay does no recursion at all.

one is member of, if they use all the same "member" attribute
(memberof.member-ad), but have different structural classes
(memberof-group-oc)?

Is there a (perl?) script that is able to find all groups one is
member-of?

- Chris



--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/

References:
- Member of nested groups of different classes
  - From: "Chris" <chris2014@postbox.xyz>

Prev by Date: Re: rebuilding the DIT
Next by Date: how to add users to LDAP and test authentication?
Index(es):
- Chronological
- Thread