Section (5) slapo-dyngroup
slapo−dyngroup — Dynamic Group overlay to slapd
The Dynamic Group overlay allows clients to use LDAP Compare operations to test the membership of a dynamic group the same way they would check against a static group. Compare operations targeting a group_zsingle_quotesz_s static member attribute will be intercepted and tested against the configured dynamic group_zsingle_quotesz_s URL attribute.
Note that this intercept only happens if the actual Compare operation does not return a LDAP_COMPARE_TRUE result. So if a group has both static and dynamic members, the static member list will be checked first.
option applies to the Dynamic Group overlay. It should appear
- attrpair <memberAttr> <URLattr>
Specify the attributes to be compared. A compare operation on the
memberAttrwill cause the
URLattrto be evaluated for the result.