Manilal K M wrote:
I am trying to build a LDAP tree for my enterprise in which LDAP-Groups are implemented. Basically, there are two ways to implement Groups, ie either we can use _hasMembers_ under the Group Object or _isMemberof_ under the person object. Has anyone has experience in using these in openldap? Please guide me to take a decision.
I recommend using groupofnames objects and member attributes. In a directory, the best and most efficient indexed searches are going to be by distinguished name. The big concern is whether or not your clients support dn attributes well enough.
Jon Roberts www.mentata.com --- You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.
