[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: More on dynamic group searches



Ian Collins wrote:
On 05/23/10 09:21 PM, Howard Chu wrote:
Don't use dynamic groups then. Use autogroups.

Is there any documentation of autogroup or how to debug it?

I've read the README, build the module and updated my config thus:

dn: cn={8}dyngroup,cn=schema,cn=config
<stuff>
olcObjectClasses: {0}( NetscapeLDAPobjectClass:33 NAME 'groupOfURLs' SUP
top S
   TRUCTURAL MUST cn MAY ( memberURL $ businessCategory $ description $ o
$ ou $
     owner $ seeAlso $ member ) )

dn: cn=module{1},cn=config
objectClass: olcModuleList
cn: module{1}
olcModulePath: /opt/local/libexec/openldap
olcModuleLoad: {0}dynlist.la
olcModuleLoad: {1}memberof.la
olcModuleLoad: {2}auditlog.la
olcModuleLoad: {3}autogroup.la

dn: olcOverlay={2}autogroup,olcDatabase={1}hdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcAutomaticGroups
olcOverlay: {2}autogroup
olcAGattrSet: {0}groupOfURLs memberURL member

But it doesn't appear to be working.

What have you done to test it? As the README says, it operates when a write operation occurs that may affect the membership of a given group.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/