Total Pageviews

Friday, September 12, 2014

OID or LDAP difference posixGroup vs. groupofNames


In OID or LDAP  there are two ways of grouping users.

The objectClass posixGroup
The objectClass groupofNames.

posixGroup:  Uses the memberUid attribute which contains only the value of the UID of a users full DN. is user is part of this group attribute you need to match is only UID of the user
  For example:
cn=mygroup,ou=Groups,dc=example,dc=com
memberUID: shahbazc


shahbazc is member of mygroup

groupofNames: Uses the member attribute which contains the full DN of the user. complete DN of the member is displayed.

 For example:

cn=myGroup,ou=Groups,dc=example,dc=com

 member: uid=testuser,ou=People,dc=example,dc=com



 

No comments:

Post a Comment