[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: 'Inheriting' an attribute from a group.

Am 03.02.2011 21:46, schrieb ian+openldap@comtek.co.uk:
> Is there a recommended, 'production' way to inherit certain attributes
> from a group? Perhaps some kind of overlay?
> For example, if a user is in the 'users' group and the users group has
> the attribute userQuota=100 then the user will appear to have
> userQuota=100.
> If, on the other hand, userQuota=200 is set on the user then that would
> override the current value.
> Thanks for any suggestions.
> Ian


I would approach this on application level. Get the user object and
check for the userQuota attribute; if it's empty or not present, go for
the group(s). Or the other way around; get the attribute from the group,
then check all members for individual overrides.

Christian Manal