--On Monday, October 17, 2022 6:07 PM +0200 Frédéric Goudal <[email protected]> wrote:

Hello,

Thanks I have found the correct documentation, read it 5 times (well
english is not natural for me).

So, If I have only static groups should I use only this :

olcDynListAttrSet: myPerson labeledURI myMemberOf@GroupOfNames


What I don't understand is that from this sentence in the man page ::

If the optional static-oc objectClass is also specified, then the
memberOf attribute will also be populated with the DNs of the static
groups that an entry is a member of.

Does it means that the labaledURI attr in my myPerson objects has no use
? Or it should return a list of objects of objectClass GroupOfNames that
will be used to build the myMemberOf value (thus allowing to restrict the
groups where to search for membership ?


Correct, you should not need to add labeledURI to your users. One point of dynlist rewrite in 2.5 (and later) is to be able to replace the slapo-memberOf overlay with dynamically generated memberships for the users

Regards,
Quanah



Reply via email to