On 28/03/06, Jon Roberts <[EMAIL PROTECTED]> wrote: > Manilal K M wrote: > > I am trying to build a LDAP tree for my enterprise in which > > LDAP-Groups are implemented. Basically, there are two ways to > > implement Groups, ie either we can use _hasMembers_ under the Group > > Object or _isMemberof_ under the person object. Has anyone has > > experience in using these in openldap? Please guide me to take a > > decision. > > I recommend using groupofnames objects and member attributes. In a > directory, the best and most efficient indexed searches are going to be > by distinguished name. The big concern is whether or not your clients > support dn attributes well enough. >
As far as my client applications are concerned, they don't have support for groups in ldaps. I need to write scripts to make them group aware. My wish is to adopt the best strategy for groups in the ldap directory and then develop hooks such that the application reads the group information from ldap directory. So it would be nice if someone could give information abt the most effective and extensible group implementation. regards Manilal
