questions about memberof-refint option

2015-11-19 Thread M. P.
Hi, I'm playing with memberof overlay. For my tests, I use the default database (numbered 1) from slapd installation with suffix dc=nodomain. The tests are running on debian jessie 8.2 and slapd version 2.4.40+dfsg-1 Activating the module in cn=module entry and activating the overlay for th

Re: questions about memberof-refint option

2015-11-19 Thread Michael Ströder
M. P. wrote: > Reading the man page, I saw memberof-refint option. From what I understand, > when set to true, you can alter the user's "is member of" attribute and that > would be reflected in the group's "member" attribute. Right ? I read the man page differently: "memberof-refint true" preserv

Re: questions about memberof-refint option

2015-11-21 Thread M. P.
Le 2015-11-20 08:19, Michael Ströder a écrit : M. P. wrote: Reading the man page, I saw memberof-refint option. From what I understand, when set to true, you can alter the user's "is member of" attribute and that would be reflected in the group's "member" attribute. Right ? I read the man p

Re: questions about memberof-refint option

2015-11-21 Thread Michael Ströder
M. P. wrote: >> Why do you want to change group membership by tweaking 'memberOf' anyway? > > I want to permit a "two way" group membership management, something more > flexible. First by adding members to groups objects and the other way by > adding groups to users objects. I dont know if it is c

Re: questions about memberof-refint option

2015-11-21 Thread Quanah Gibson-Mount
--On Friday, November 20, 2015 2:59 PM +0100 "M. P." wrote: I want to permit a "two way" group membership management, something more flexible. First by adding members to groups objects and the other way by adding groups to users objects. I dont know if it is clear enough and if it is doable li

Re: questions about memberof-refint option

2015-11-21 Thread M. P.
Le 2015-11-21 19:59, Quanah Gibson-Mount a écrit : --On Friday, November 20, 2015 2:59 PM +0100 "M. P." wrote: I want to permit a "two way" group membership management, something more flexible. First by adding members to groups objects and the other way by adding groups to users objects. I do

Re: questions about memberof-refint option

2015-11-21 Thread M. P.
Le 2015-11-21 17:32, Michael Ströder a écrit : M. P. wrote: Why do you want to change group membership by tweaking 'memberOf' anyway? I want to permit a "two way" group membership management, something more flexible. First by adding members to groups objects and the other way by adding group

Re: questions about memberof-refint option

2015-11-21 Thread Quanah Gibson-Mount
--On Sunday, November 22, 2015 12:20 AM +0100 "M. P." wrote: Le 2015-11-21 19:59, Quanah Gibson-Mount a écrit : --On Friday, November 20, 2015 2:59 PM +0100 "M. P." wrote: I want to permit a "two way" group membership management, something more flexible. First by adding members to groups o

Re: questions about memberof-refint option

2015-11-22 Thread Michael Ströder
Quanah Gibson-Mount wrote: > You can even use the memberOf attribute for creating the dynamic groups. Because 'memberOf' has "USAGE dSAOperation" you would have to switch of slapo-memberof and re-declare the attribute type description without it. Ciao, Michael. smime.p7s Description: S/MIME C

Re: questions about memberof-refint option

2015-11-22 Thread Quanah Gibson-Mount
--On Sunday, November 22, 2015 11:24 PM +0100 k c wrote: You can even use the memberOf attribute for creating the dynamic groups. The memberof attribute is a readonly attribute. How could it be modified Yeah, I was wrong, you can't use that one specifically. ;) --Quanah -- Quanah Gibs

Re: questions about memberof-refint option

2015-11-23 Thread k c
Le Sat, 21 Nov 2015 20:51:30 -0800, Quanah Gibson-Mount a écrit : > --On Sunday, November 22, 2015 12:20 AM +0100 "M. P." > wrote: > > > Le 2015-11-21 19:59, Quanah Gibson-Mount a écrit : > >> --On Friday, November 20, 2015 2:59 PM +0100 "M. P." > >> wrote: > >> > >>> I want to permit a "two

Re: questions about memberof-refint option

2015-11-23 Thread k c
Le Sun, 22 Nov 2015 14:29:00 +0100, Michael Ströder a écrit : > Quanah Gibson-Mount wrote: > > You can even use the memberOf attribute for creating the dynamic groups. > > Because 'memberOf' has "USAGE dSAOperation" you would have to switch of > slapo-memberof and re-declare the attribute type d