In OID or LDAP there are two ways of grouping users.
The objectClass posixGroup
The objectClass groupofNames.
posixGroup: Uses the memberUid attribute which contains only the value of the UID of a users full DN. is user is part of this group attribute you need to match is only UID of the user
For example:
cn=mygroup,ou=Groups,dc=example,dc=com
memberUID: shahbazc
shahbazc is member of mygroup
groupofNames: Uses the member attribute which contains the full DN of the user. complete DN of the member is displayed.
For example:
cn=myGroup,ou=Groups,dc=example,dc=com
member: uid=testuser,ou=People,dc=example,dc=com
No comments:
Post a Comment