> Aleksandar Milivojevic wrote: > > Is it possible to make LDAP query filter similar to the joining tables in > > SQL? > > > > Basically, what I want is to get the entry that have objectClass > > posixAccount, but only if the user is in specific posixGroup. Something > > like '(&(uid=someuser)(objectClass=posixAccount))' and > > '(&(memberUid=someuser)(cn=somegroup)(objectClass=posixGroup))'. Well, > > combined somehow. And returning only entries that have posixAccount > > objectClass. > > > > A statment like that would be trivial in SQL. However I'm having hard > > time figuring out how to do it in single LDAP query. If it is possible at > > all. > > An LDAP directory is a hierarchical, not relational, database. An LDAP > server does not contain a relational engine. > > You need two queries to extract this information, and need to do the > join logic in your client code - disregarding any vendor specific > features which may exist.
Thanks Mike. I was affraid I would get answer like that (after reading the RFCs and searching the Web). Oh well. Is there any standard object class that can be added to posixAccount to store group information with the user's entry? Than I would be able to do something like '(&(uid=someuser)(group=somegroup))'. Or am I on my own to create it? --- You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.
