Hi All
I was trying to write a algo which extracts Group info for
- all kinds of Groups (Static and Dynamic)
- major LDAP servers (Apache DS, OpenLDAP, MS Active Directory etc)
Based on my findings I came up with a high level algo.
Being inexperianced in the field I would request other users to comment on
these 4 small algorithms
getAllStaticGroups()
{
Filter: (&(objectclass=groupofuniquenames))//for any DS
(&(objectclass=groupofnames))//for any DS
(&(objectclass=group))//for active directory
}
getAllDynamicGroups()
{
//'memberOf' attribute of user
Filter: (&(objectclass=person)(memberOf=groupname))
//URL type dynamic groups
Filter: (&(objectclass=groupOfURLs))
}
isMemberOfStaticGroup(groupname,userdn)
{
Filter:
(&(objectclass=groupofuniquenames)(cn=groupname)(uniquemember=userdn))//for
any DS
(&(objectclass=groupofnames)(cn=groupname)(member=userdn))//for any DS
(&(objectclass=group)(cn=groupname)(member=userdn))//for active
directory
}
isMemberOfDynamicGroup(groupname,userdn)
{
//'memberOf' attribute of user
Step 1: Filter: (&(objectclass=person)(memberOf=groupname))
//URL type dynamic groups
Step 1: Filter: (&(objectclass=groupOfURLs)(cn=groupname))
Step 2: use 'memberURL' attribute to chk if user is in the group
}
---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the
SUBJECT of the message.
