slapo-dyngroup(5)

1SLAPO-DYNGROUP(5)             File Formats Manual            SLAPO-DYNGROUP(5)
2
3
4

NAME

6       slapo-dyngroup - Dynamic Group overlay to slapd
7

SYNOPSIS

9       /etc/openldap/slapd.conf
10

DESCRIPTION

12       The Dynamic Group overlay allows clients to use LDAP Compare operations
13       to test the membership of a dynamic group the same way they would check
14       against  a  static group. Compare operations targeting a group's static
15       member attribute will be intercepted and tested against the  configured
16       dynamic group's URL attribute.
17
18       Note  that  this intercept only happens if the actual Compare operation
19       does not return a LDAP_COMPARE_TRUE result. So  if  a  group  has  both
20       static  and  dynamic  members,  the  static member list will be checked
21       first.
22

CONFIGURATION

24       This slapd.conf option applies to the Dynamic Group overlay.  It should
25       appear after the overlay directive.
26
27       attrpair <memberAttr> <URLattr>
28              Specify  the  attributes  to be compared. A compare operation on
29              the memberAttr will cause the URLattr to be  evaluated  for  the
30              result.
31

EXAMPLES

33         database mdb
34         ...
35         overlay dyngroup
36         attrpair member memberURL
37

FILES

39       /etc/openldap/slapd.conf
40              default slapd configuration file
41

BACKWARD COMPATIBILITY

43       The  dyngroup  overlay  has been reworked with the 2.5 release to use a
44       consistent namespace as with other overlays. As a side-effect the  fol‐
45       lowing cn=config parameters are deprecated and will be removed in a fu‐
46       ture release: olcDGAttrPair is replaced with olcDynGroupAttrPair olcDG‐
47       Config is replaced with olcDynGroupConfig
48

AUTHOR

53       Howard Chu
54
55
56
57OpenLDAP 2.6.6                    2023/07/31                 SLAPO-DYNGROUP(5)