Dynamic Groups; How Enterprise Server Implements Dynamic Groups - Netscape ENTREPRISE SERVER 6.1 - 04-2002 ADMINISTRATOR Administrator's Manual

Creating Groups
For more information, see The New Group Page in the online help.

Dynamic Groups

A dynamic group has an
memberURL
Enterprise Server enables you to create a dynamic group when you want to group
users automatically based on any attribute, or when you want to apply ACLs to
specific groups which contain matching DNs. For example, you can create a group
that automatically includes any DN that contains the attribute
department=marketing
the search returns a group including all DNs containing the attribute
department=marketing
results based on this filter. Subsequently, you can define an ACL for the resulting
dynamic group.
This section includes the following topics:
•

How Enterprise Server Implements Dynamic Groups

• Groups Can Be Static and Dynamic
• Dynamic Group Impact on Server Performance
• Guidelines for Creating Dynamic Groups
• To Create a Dynamic Group
How Enterprise Server Implements Dynamic Groups
Enterprise Server implements dynamic groups in the LDAP server schema as
objectclass = groupOfURLs
attributes, each one consisting of an LDAP URL that enumerates a set of objects in
the directory. The members of the group would be the union of these sets. For
example, the following group contains just one member URL:
ldap:///o=example.com??sub?(department=marketing)
This example describes a set that consists of all objects below "
whose department is "marketing."
The LDAP URL can contain a search base DN, a scope and filter, however, not a
hostname and port. This means that you can only refer to objects on the same
LDAP server. All scopes are supported.
72 Netscape Enterprise Server Administrator's Guide • April 2002 (Draft)
objectclass
attributes, each of which is a LDAP URL that describes a set of objects.
. If you apply a search filter for
. You can then define a dynamic group from the search
. A
of
groupOfURLs
class can have multiple
groupOfURLS
, and has zero or more
department=marketing
memberURL
o=example.com
,
"