The X.500/LDAP model is not relational. One should not expect any such synchronization between objects to be performed by the directory service.
However, I do note that slapd(8) allows for plugins which can do just about anything, including implementation of application specific behaviors. I don't recall there being any plugin applicable to the particular problem described here. Kurt At 12:07 AM 2/23/2006, Stephan Moeller wrote: >Hello, > >sorry for this simple (and I am sure) already discussed question! But I found >no answer with google and co. > >Is there any way to synchronize the memberUID of the group-object (group) with >gidNumber of the posixAccount-object (user)? > >I cannot believe, that it is necessary to make changes only at one object and >to synchronize the other object with a script. At the moment I change the >gidNumber of the user and let the script collect the memberUIDs of the >group-object from the posixAccount-object (user). > >I would quite appreciate any hint. Thanks! > >Stephan Moeller
