Howard Chu wrote: > Ryan Steele wrote: >> Howard Chu wrote: >>> autogroup isn't supposed to perform any expansion during searches. >>> That's not what it does. >>> >> >> So, you're saying that dynlist should perform the expansion, and >> autogroup > just allows you to filter it? > > I'm quite certain I never said any such thing.
That wasn't a statement, it was a question, denoted by the question mark punctuation. And, if the answer is no, can you elaborate on what you did mean? Or, perhaps answer the question I asked at the end of the post, which was regarding how to achieve the desired affect, as you alluded to in http://www.openldap.org/lists/openldap-software/200802/msg00211.html, which reads: Pierangelo Masarati wrote: > Guy Deleeuw wrote: >> All work fine, I can retrieve the two group entries. >> Now, I try to retrieve the group which have a particular member >> (ExoMemberShipMember): >> ldapsearch -x -LLL -b >> "ou=groups,ou=portal,ou=www,ou=Exo,o=Eurofer,c=be" >> -s sub >> >> "(&(&(objectClass=ExoMemberShip)(ExoMemberShipURL=*))(ExoMemberShipMember=cn=De >> Leeuw Guy,br=Internal,o=Eurofer,c=be))" >> And I receive an empty respond. >> Could you give me your advice about the feasibility of this kind of >> query ? > This occurs because you can't filter for dynamically created members, as > they get added to the entry while it's being returned. So the dynamic > members are not present in the entry during search, when the filter is > evaluated. You can only filter for static data. You might want to look at the autogroup overlay http://www.openldap.org/its/index.cgi/Contrib?id=5145 which will be included in OpenLDAP 2.4.8. -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/ > > The autogroup Readme clearly states: > I have read the README. I'm interested in the behavior mentioned in that post, if you could be so kind to elaborate on the statement you made in it? Thanks, Ryan
