--On Monday, June 6, 2022 5:19 PM +0200 Michael Ströder <[email protected]> wrote:
Like it or not, for strictly matching POSIX group names you *must* distinguish these values no matter what the LDAP matching rule says: memberOf: cn=Foo,ou=1,dc=example,dc=com memberOf: cn=foo,ou=2,dc=example,dc=com (note the different parent DNs)
Regardless of case sensitivity, these are already by definition two entirely separate groups because they point to different entries.
--Quanah
