mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-03-07 14:18:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add documentation on ACL requirements for psuedo-attribute entryDN

Browse Source 
Also fix up the example for replacing the memberOf overlay
This commit is contained in:
Quanah Gibson-Mount 2020-11-10 22:38:10 +00:00
parent ee49c83976
commit 4041848587
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/man/man5/slapo-dynlist.5
View File

@ -143,6 +143,9 @@ to expand the group.
Values of the
.B dgAuthz
attribute must conform to the (experimental) \fIOpenLDAP authz\fP syntax.
When using dynamic memberOf in search filters, search access to the
.B entryDN
pseudo-attribute is required.
.SH EXAMPLE
This example collects all the email addresses of a database into a single
@ -221,7 +224,7 @@ attribute to all the members of a dynamic group:
This example extends the dynamic memberOf feature to add the
.B dgMemberOf
.B memberOf
attribute to all the members of both static and dynamic groups:
.LP
.nf
@ -232,7 +235,7 @@ attribute to all the members of both static and dynamic groups:
# ...
overlay dynlist
dynlist\-attrset groupOfURLs memberURL member+dgMemberOf@groupOfNames
dynlist\-attrset groupOfURLs memberURL member+memberOf@groupOfNames
.fi
.LP
This dynamic memberOf feature can fully replace the functionality of the