On Fri, Jun 23, 2006 at 10:46:36AM -0600, Pavel Jbanov wrote: > Thank you for the reply. > > I see what you're saying... I found some past discussions on this topic: > http://www.openldap.org/lists/openldap-software/200204/msg00756.html > > I'm just trying to support one standard mechanism, but it appears that > there is none... > Active Directory does support 'dynamic' memberOf attribute which made me > assume that it's some kind of a standard (I said that I'm very new to LDAP).
OpenLDAP does support dynamic groups, you could take a look into that. Given a memberOf-like attribute in the user's entry, a group could be automatically built on-the-fly by slapd: http://www.openldap.org/faq/data/cache/1209.html
