SLAPO-DYNGROUP(5) File Formats Manual SLAPO-DYNGROUP(5)
slapo-dyngroup - Dynamic Group overlay to slapd
The Dynamic Group overlay allows clients to use LDAP Compare operations to test the membership of a dynamic group the same way they would check against a static group. Compare operations targeting a group's static member attribute will be intercepted and tested against the configured dynamic group's URL attribute. Note that this intercept only happens if the actual Compare operation does not return a LDAP_COMPARE_TRUE result. So if a group has both static and dynamic members, the static member list will be checked first.
This slapd.conf option applies to the Dynamic Group overlay. It should appear after the overlay directive. attrpair <memberAttr> <URLattr> Specify the attributes to be compared. A compare operation on the memberAttr will cause the URLattr to be evaluated for the result.
database mdb ... overlay dyngroup attrpair member memberURL
ETCDIR/slapd.conf default slapd configuration file
The dyngroup overlay has been reworked with the 2.5 release to use a consistent namespace as with other overlays. As a side- effect the following cn=config parameters are deprecated and will be removed in a future release: olcDGAttrPair is replaced with olcDynGroupAttrPair olcDGConfig is replaced with olcDynGroupConfig
This page is part of the OpenLDAP (an open source implementation of the Lightweight Directory Access Protocol) project. Information about the project can be found at ⟨http://www.openldap.org/⟩. If you have a bug report for this manual page, see ⟨http://www.openldap.org/its/⟩. This page was obtained from the project's upstream Git repository ⟨https://git.openldap.org/openldap/openldap.git⟩ on 2021-06-20. (At that time, the date of the most recent commit that was found in the repository was 2021-06-16.) If you discover any rendering problems in this HTML version of the page, or you believe there is a better or more up-to-date source for the page, or you have corrections or improvements to the information in this COLOPHON (which is not part of the original manual page), send a mail to firstname.lastname@example.org OpenLDAP LDVERSION RELEASEDATE SLAPO-DYNGROUP(5)
Pages that refer to this page: slapd.overlays(5)