[Mageia-sysadm] Dynlist and change on ldap

Michael Scherer misc at zarb.org
Thu Apr 21 22:09:34 CEST 2011


Le jeudi 21 avril 2011 à 22:04 +0200, Michael Scherer a écrit :

> To use it, just add a group like this : 
> 
> cn=mga-test_dyn,ou=Group,dc=mageia,dc=org
> cn: mga-test_dyn
> objectClass: posixGroup
> objectClass: groupOfURLs
> gidNumber: 5013
> memberURL:
> ldap:///ou=People,dc=mageia,dc=org?dn?sub?(&(objectClass=posixAccount)(memberOf=cn=mga-council,ou=Group,dc=mageia,dc=org))
> memberURL:
> ldap:///ou=People,dc=mageia,dc=org?dn?sub?(&(objectClass=posixAccount)(memberOf=cn=mga-sysadmin,ou=Group,dc=mageia,dc=org))
> 
> This one will create a group with sysadmin and council member.
> 
> # getent group mga-test_dyn
> mga-test_dyn:*:5013:misc,rda,boklm,tmb,ennael,dams,buchan,dmorgan,nanardon,colin,blino,pterjan
> 
> ( ok here, it doesn't work fully, wobo and trishf42 are missing but
> since ennael and rda are not in sysadmin group, this kinda work, I will
> look at this more closely, maybe a index issue, or memberOf not being
> refreshed )

Ok as usual, I first say something stupid and then find the issue.

Of course, for this example, we should not add
"(objectClass=posixAccount)" in the filter, as neither wobo or trishf42
have a posixAccount :)

-- 
Michael Scherer



More information about the Mageia-sysadm mailing list