Table of Contents
Advertisement
Creating Groups
department=marketing
the search returns a group including all DNs containing the attribute
department=marketing
results based on this filter. Subsequently, you can define an ACL for the resulting
dynamic group.
This section includes the following topics:
•
How Enterprise Server Implements Dynamic Groups
•
Groups Can Be Static and Dynamic
•
Dynamic Group Impact on Server Performance
•
Guidelines for Creating Dynamic Groups
•
To Create a Dynamic Group
How Enterprise Server Implements Dynamic Groups
Enterprise Server implements dynamic groups in the LDAP server schema as
objectclass = groupOfURLs
attributes, each one consisting of an LDAP URL that enumerates a set of objects in
the directory. The members of the group would be the union of these sets. For
example, the following group contains just one member URL:
ldap:///o=example.com??sub?(department=marketing)
This example describes a set that consists of all objects below "
whose department is "marketing."
The LDAP URL can contain a search base DN, a scope and filter, however, not a
hostname and port. This means that you can only refer to objects on the same
LDAP server. All scopes are supported.
The DNs are included automatically, without your having to add each individual
to the group. The group changes dynamically, because Enterprise Server performs
an LDAP server search each time a group lookup is needed for ACL verification.
The user and group names used in the ACL file correspond to the
the objects in the LDAP database.
NOTE
74
Netscape Enterprise Server Administrator's Guide • November 2001
. If you apply a search filter for
. You can then define a dynamic group from the search
. A
groupOfURLS
Enterprise Server uses the cn (commonName) attribute as group name for
ACLs.
department=marketing
class can have multiple
o=example.com
cn
,
memberURL
"
attribute of
Advertisement
Table of Contents
