Ian Collins wrote:
On 05/23/10 09:21 PM, Howard Chu wrote:
Don't use dynamic groups then. Use autogroups.
Is there any documentation of autogroup or how to debug it?
I've read the README, build the module and updated my config thus:
dn: cn={8}dyngroup,cn=schema,cn=config
<stuff>
olcObjectClasses: {0}( NetscapeLDAPobjectClass:33 NAME 'groupOfURLs' SUP
top S
TRUCTURAL MUST cn MAY ( memberURL $ businessCategory $ description $ o
$ ou $
owner $ seeAlso $ member ) )
dn: cn=module{1},cn=config
objectClass: olcModuleList
cn: module{1}
olcModulePath: /opt/local/libexec/openldap
olcModuleLoad: {0}dynlist.la
olcModuleLoad: {1}memberof.la
olcModuleLoad: {2}auditlog.la
olcModuleLoad: {3}autogroup.la
dn: olcOverlay={2}autogroup,olcDatabase={1}hdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcAutomaticGroups
olcOverlay: {2}autogroup
olcAGattrSet: {0}groupOfURLs memberURL member
But it doesn't appear to be working.
What have you done to test it? As the README says, it operates when a write
operation occurs that may affect the membership of a given group.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/