On Mon, 09 Dec 2013 10:12:42 +0000 Liam Gretton <[email protected]>
wrote
> The way I worked around this is to create new groups as groupOfNames 
> with a single empty member: attribute. It's never caused any problems 
> with any clients in my experience.

Yes, working around it with cn=dummy is possible.
Take care of config of slapo-refint.

But it's bad practice if you want to have fine-grained constraints for 'member'
to existing and active member entries.

Ciao, Michael.


Reply via email to