So I've been porting a legacy LDAP database from old Mac OS X to OpenLDAP. (I
know some of you will stop reading here in memory of high frustration ... lol).
Most group LDAP records I have look like this:
#### DN: cn=training,cn=groups,dc=mycompany,dc=com
cn => [ training ]
gidNumber => [ 100 ]
memberUid => [ alice, bob, carla, dave ],
objectClass => [ apple-group,extensibleObject,posixGroup,top ]
For various reasons, I need a memberOf attribute to work from OpenLDAP for
these groups on user records. This has been a pain point.
First, the memberOf overlay (which appears to be deprecated) requires me to
read in and write out all the user records. I didn't know how to do that in Lam
PRO, so my first question is of course ... how would I just read in and write
out all the user records so OpenLDAP will attach the proper memberOf attribute?
Next, in consideration of trying to support myself, I found the dynlist overlay.
At first glance, this is likely the more correct way to go since it observes
the single source of truth idea and does not duplicate the group membership
data. However, that seems to (after much research) require me to take the
memberUid array and convert it to a memberURL entry for each value in the
memberUid array.
This brings me to my second question: Can LAM Pro do that?
My final question is: Is there something I am missing here? I am not new to
computer science but I am rather new to LDAP.
Thanks for any cogent replies.
--
Dave Hayes - Computer and Internet Consultant - LA CA, USA
>> *Opinions expressed above are entirely my own* <<
It is often stated that generalizations are dangerous.
This is true: but only when it -is- true. Generalizations
are useful, even essential, in certain situations. "Cars are
dangerous" is useful for a child for a period of life. After
that, it may become a barrier to crossing the road. At that
point, other generalizations are applied, to protect the
child for a period or to carry the child a stage further
towards learning.
A huge area of human life and thought requires the
intelligent use of generalizations: including using them,
modifying them, and superseding them.
_______________________________________________
Lam-public mailing list
Lam-public@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lam-public
