Re: ACL to replicate a single value of an attribute

2012-08-01 Thread Aaron Richton
On Wed, 1 Aug 2012, Andrei B?NARU wrote: Is it possible to create an ACL entry that will allow only the first value of an attribute to be read ( an example would be nice ) ? For example having userPassword with a first value using MD5 hashing and a second value as plain text. We plan on

What will happen if a user is a member of a group, but has another group as its primary group

2012-08-01 Thread Qian Zhang
Hi, In my OpenLDAP server, it is possible to set a user as a member of a group, but it has another group as its primary group (I am using LDAP Admin as LDAP client tool). For example, in group1, I can see user1 as its memberUid attribute, but the gidNumber attribute of user1 is group2. I'd like

Re: What will happen if a user is a member of a group, but has another group as its primary group

2012-08-01 Thread Guillaume Rousse
Le 01/08/2012 16:21, Qian Zhang a écrit : Hi, In my OpenLDAP server, it is possible to set a user as a member of a group, but it has another group as its primary group (I am using LDAP Admin as LDAP client tool). For example, in group1, I can see user1 as its memberUid attribute, but the

Re: What will happen if a user is a member of a group, but has another group as its primary group

2012-08-01 Thread Dan White
On 08/01/12 22:21 +0800, Qian Zhang wrote: Hi, In my OpenLDAP server, it is possible to set a user as a member of a group, but it has another group as its primary group (I am using LDAP Admin as LDAP client tool). For example, in group1, I can see user1 as its memberUid attribute, but the

Re: What will happen if a user is a member of a group, but has another group as its primary group

2012-08-01 Thread Qian Zhang
Thanks Dan! Basically, I also have concern about the performance. Because in that case, when figuring out how many users in a group, I need to not only consider the group's membership (memberUID) attribute, but also user's gidNumber attribute (I am trying to write a Java application talk to my

Re: What will happen if a user is a member of a group, but has another group as its primary group

2012-08-01 Thread Dan White
On 08/01/12 10:00 -0500, Dan White wrote: On 08/01/12 22:21 +0800, Qian Zhang wrote: In my OpenLDAP server, it is possible to set a user as a member of a group, but it has another group as its primary group (I am using LDAP Admin as LDAP client tool). For example, in group1, I can see user1 as

Re: modify search base dn depending on search filter

2012-08-01 Thread Gavin Henry
Hi, can please someone give me a hint, how to change the search base dn depending on the search filter. If someone searches “cn=a@b” at a fixed base like dc=local I want to rewrite this search to cn=a with search base “dc=b,dc=local” Hi Robert, Did you read man slapo-rwm ? Thanks. --