[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: structural objectclass checking

On 1/9/20 4:35 PM, Markus.Storm@t-systems.com wrote:
>> Define a new STRUCTURAL object class derived from different other 
>> STRUCTURAL object classes.
>
> But that would mean to assign that new group to every entry that has
> 2 structural objectclasses today, wouldn't it?
Yes. But since you have to do an export/import anyway it's not a big
deal to create a simple LDIF filter script to add such a custom object
class.

> So it would require me to change the upstream data e.g. replace
> posixGroup by aeGroup and remove groupOfURLs (to stick with your
> example) and the application as there's applications to search for
> e.g. &(objectclass=posixGroup)(objectclass=groupOfURLs).
I don't exactly understand what you mean.

When using object class inheritance every filter for a SUP object class
also matches.

You can play with Æ-DIR's demo which has a public LDAP(S) port and test
how searching the group entries work:

https://www.ae-dir.com/demo.html

> And I would need to fix future entries on the fly (rwm module in
> replication??)
Using slapo-rwm would not work.

> Guess that won't work out, possibly still easier to work around this
> in the source code.
If you want to implement C code you could implement custom overlays and
do whatever you want.

Ciao, Michael.