On Sat, 2010-10-30 at 00:57 +0100, [email protected] wrote:

> Is there some kind of way to get acl_groups out of LDAP without having 
> to maintain an entry with a list of groups 'a,b,c' and so on?

Nope.

> Alternately I could perhaps use an OpenLDAP overlay to show 'group' 
> attributes for each user's ldap entry. I would then like to be able to 
> tell it to get all 'group' attributes and comma-separate them.

That would be nice, yes. Added to TODO for the LDAP configuration
rewrite (v2.1 maybe).


Reply via email to