[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: "memberof" function for memberUid attribute.



Andi Zulfadli wrote:
> What is the format for filter the member of group?
> 
> we know that "memberof" format works in member attribute in openldap group
> entry format.
> 
> example attribute :
> 
> dn: cn=Admins,ou=Users,o=<org-id>,dc=jumpcloud,dc=com
> 
> *member: uid=john,ou=Users,o=<org-id>,dc=jumpcloud,dc=commember:
> uid=mary,ou=Users,o=<org-id>,dc=jumpcloud,dc=com*objectClass: top
> objectClass: groupOfNames
> description: tagGroup
> cn: Admins
> ou: Admins
> 
> example filter :
> example:
> (&(objectClass=person)(memberOf=CN=name-of-the-group,OU=xample,DC=com))
> 
> But how about if my openldap group member attribute using memberUid as
> attibute member's group.
> 
> dn: cn=Admins,ou=Users,o=<org-id>,dc=jumpcloud,dc=com
> 
> 
> *memberUid: johnmemberUid: mary*objectClass: top
> objectClass: groupOfNames
> description: tagGroup
> cn: Admins
> ou: Admins
> 
> How can i use "memberof" filter format in my openLDAP?

As slapo-memberof(5) clearly states: It works only with DN-syntax attributes.

You could add a custom attribute to your member entries and maintain this to
reflect all the group memberships. But I'd strongly recommend to not do it.

Ciao, Michael.


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature