Le 22/10/15 21:06, Naveen Gangam a écrit :
> Thank you Stefan,
> I will try out the 1.1 for returnedAttributes.

1.1 specifically returns *no* attribute, just the DN. This is probably
what you want.

>
> Regarding the user-group membership, with "member" set on the group entries
> as you advised, what would be the easiest means to find "all groups a user
> belongs to" ?
member. But you can perfectly create your own attribute that will hold
the groups a user belongs to.

> The Atn provider I am trying to write a test for has group filtering
> support the currently relies on an attribute being set on the user entry to
> that maps to a group it is part of. This attribute by default is
> "memberOf". Should the provider code be changed to find groups the other
> way?

Create a memberOf attribute and add it to the 'other' schema, so that
you will be able to use this attribute with your entries. Note that you
will have to add an ObjectClass (Auxiliary) that  will contain this
newly created AttributeType. Here is an exemple on how to use the
ApacheDS test framework to create those AT and OC :

http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M20/server-integ/src/test/java/org/apache/directory/server/schema/SchemaIT.java?revision=1676627&view=markup


Reply via email to