[ https://issues.apache.org/jira/browse/KNOX-461?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15401297#comment-15401297 ]
Kevin Risden commented on KNOX-461: ----------------------------------- For testing of this, Apache DS doesn't currently support virtual attributes. We should be able to fake it by actually adding memberOf as a real attribute. * DIRSERVER-1067 - Add support for virtual attributes * DIRSERVER-1844 - Add support for memberOf virtual attribute > Leverage Directory Computed Attribute for User Group Discovery > --------------------------------------------------------------- > > Key: KNOX-461 > URL: https://issues.apache.org/jira/browse/KNOX-461 > Project: Apache Knox > Issue Type: Improvement > Reporter: Dilli Arumugam > Priority: Critical > Fix For: 0.10.0 > > > Leverage Directory Computed Attribute for User Group Discovery > We should use computed attribute memberof supported by Active Driectory to > discover groups of the authenticated user. This would significantly boost > performance as compared we computing groups using group search. > OpenLDAP also could be configured to return computed groups. > However, OpenLDAP would return this attribute as memberof. -- This message was sent by Atlassian JIRA (v6.3.4#6332)