2007-02-24 02:23:44 +08:00
|
|
|
.TH SLAPO-DYNGROUP 5 "RELEASEDATE" "OpenLDAP LDVERSION"
|
2009-01-22 08:40:04 +08:00
|
|
|
.\" Copyright 2005-2009 The OpenLDAP Foundation All Rights Reserved.
|
2007-02-24 02:23:44 +08:00
|
|
|
.\" Copying restrictions apply. See COPYRIGHT/LICENSE.
|
|
|
|
|
.\" $OpenLDAP$
|
|
|
|
|
.SH NAME
|
2009-06-03 08:43:44 +08:00
|
|
|
slapo\-dyngroup \- Dynamic Group overlay to slapd
|
2007-02-24 02:23:44 +08:00
|
|
|
.SH SYNOPSIS
|
|
|
|
|
ETCDIR/slapd.conf
|
|
|
|
|
.SH DESCRIPTION
|
|
|
|
|
The Dynamic Group overlay allows clients to use LDAP Compare operations
|
|
|
|
|
to test the membership of a dynamic group the same way they would check
|
|
|
|
|
against a static group. Compare operations targeting a group's static
|
|
|
|
|
member attribute will be intercepted and tested against the configured
|
|
|
|
|
dynamic group's URL attribute.
|
|
|
|
|
.LP
|
|
|
|
|
Note that this intercept only happens if the actual
|
|
|
|
|
Compare operation does not return a LDAP_COMPARE_TRUE result. So if a
|
|
|
|
|
group has both static and dynamic members, the static member list will
|
|
|
|
|
be checked first.
|
|
|
|
|
.SH CONFIGURATION
|
|
|
|
|
This
|
|
|
|
|
.B slapd.conf
|
|
|
|
|
option applies to the Dynamic Group overlay.
|
|
|
|
|
It should appear after the
|
|
|
|
|
.B overlay
|
|
|
|
|
directive.
|
|
|
|
|
.TP
|
|
|
|
|
.B attrpair <memberAttr> <URLattr>
|
|
|
|
|
Specify the attributes to be compared. A compare operation on the
|
|
|
|
|
.I memberAttr
|
|
|
|
|
will cause the
|
|
|
|
|
.I URLattr
|
|
|
|
|
to be evaluated for the result.
|
|
|
|
|
.SH EXAMPLES
|
|
|
|
|
.nf
|
|
|
|
|
database bdb
|
|
|
|
|
...
|
|
|
|
|
overlay dyngroup
|
|
|
|
|
attrpair member memberURL
|
|
|
|
|
.fi
|
|
|
|
|
.SH FILES
|
|
|
|
|
.TP
|
|
|
|
|
ETCDIR/slapd.conf
|
|
|
|
|
default slapd configuration file
|
|
|
|
|
.SH SEE ALSO
|
2009-01-30 08:23:58 +08:00
|
|
|
.BR slapd.conf (5),
|
|
|
|
|
.BR slapd\-config (5).
|
2007-02-24 02:23:44 +08:00
|
|
|
.SH AUTHOR
|
|
|
|
|
Howard Chu
|
