Re: Dynamic Groups

[Michael Ströder <michael@stroeder.com>]

Michael Ströder wrote:
> > No, dynamic groups are purely server-sided. To the client they appear 
> > as a regular groupOfNames or groupOfUniqueNames with member or 
> > uniqueMember
> > attributes.
>
> ???

Well, as usual it depends... ;-)
With Netscape 6.x / iPlanet / Sun One it's client-side.

> > I.e. on the server side it may look like
> > dn: cn=finance,ou=groups,o=company
> > objectclass: dynamicGroupOfNames
> > cn: finance
> > searchUri: ldap:///dc=foo,dc=org??sub?(ou=finance)
> > to the client it looks like
> > dn: cn=finance,ou=groups,o=company
> > objectclass: groupOfNames
> > cn: finance
> > member: cn= joe beancounter,ou=people,o=company
> > member: cn=jane beancountress,ou=people,o=company
>
> On which server does that work?

Ok, checked with ldap://www.nldap.com and experimented with a test entry of 
object class 'dynamicGroup'.

You can check yourself:
http://www.stroeder.com/cgi-bin/web2ldap.fcgi?ldap://www.nldap.com/cn=Dynamic%20Group%20Test,ou=Groups,ou=web2ldap,ou=user,o=NOVELL

> > AFAIK it is an idea implemented by at least one vendor I know.
>
> Which one?

Novell eDirectory.

Ciao, Michael.