Why not use a search like: (&(objectClass=groupOfNames)(member=cn=user2,ou=People,dc=example,dc=com)) -jim
-- -jim Jim Willeke On Thu, Oct 22, 2015 at 3:39 PM, Emmanuel Lécharny <[email protected]> wrote: > Le 22/10/15 21:06, Naveen Gangam a écrit : > > Thank you Stefan, > > I will try out the 1.1 for returnedAttributes. > > 1.1 specifically returns *no* attribute, just the DN. This is probably > what you want. > > > > > Regarding the user-group membership, with "member" set on the group > entries > > as you advised, what would be the easiest means to find "all groups a > user > > belongs to" ? > member. But you can perfectly create your own attribute that will hold > the groups a user belongs to. > > > The Atn provider I am trying to write a test for has group filtering > > support the currently relies on an attribute being set on the user entry > to > > that maps to a group it is part of. This attribute by default is > > "memberOf". Should the provider code be changed to find groups the other > > way? > > Create a memberOf attribute and add it to the 'other' schema, so that > you will be able to use this attribute with your entries. Note that you > will have to add an ObjectClass (Auxiliary) that will contain this > newly created AttributeType. Here is an exemple on how to use the > ApacheDS test framework to create those AT and OC : > > > http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M20/server-integ/src/test/java/org/apache/directory/server/schema/SchemaIT.java?revision=1676627&view=markup > > >
