Re: 'Inheriting' an attribute from a group.

[Christian Manal <moenoel@informatik.uni-bremen.de>]

Am 03.02.2011 21:46, schrieb ian+openldap@comtek.co.uk:
> Is there a recommended, 'production' way to inherit certain attributes
> from a group? Perhaps some kind of overlay?
> 
> For example, if a user is in the 'users' group and the users group has
> the attribute userQuota=100 then the user will appear to have
> userQuota=100.
> 
> If, on the other hand, userQuota=200 is set on the user then that would
> override the current value.
> 
> Thanks for any suggestions.
> 
> Ian
> 

Hi,

I would approach this on application level. Get the user object and
check for the userQuota attribute; if it's empty or not present, go for
the group(s). Or the other way around; get the attribute from the group,
then check all members for individual overrides.


Regards,
Christian Manal