On 1/9/20 4:35 PM, [email protected] wrote: >> Define a new STRUCTURAL object class derived from different other >> STRUCTURAL object classes. > > But that would mean to assign that new group to every entry that has > 2 structural objectclasses today, wouldn't it? Yes. But since you have to do an export/import anyway it's not a big deal to create a simple LDIF filter script to add such a custom object class.
> So it would require me to change the upstream data e.g. replace > posixGroup by aeGroup and remove groupOfURLs (to stick with your > example) and the application as there's applications to search for > e.g. &(objectclass=posixGroup)(objectclass=groupOfURLs). I don't exactly understand what you mean. When using object class inheritance every filter for a SUP object class also matches. You can play with Æ-DIR's demo which has a public LDAP(S) port and test how searching the group entries work: https://www.ae-dir.com/demo.html > And I would need to fix future entries on the fly (rwm module in > replication??) Using slapo-rwm would not work. > Guess that won't work out, possibly still easier to work around this > in the source code. If you want to implement C code you could implement custom overlays and do whatever you want. Ciao, Michael.
