[mdlug] anyone using ldap for a thunderbird address book?

Michael Corral micorral at comcast.net
Mon Aug 13 22:54:02 EDT 2012


2012-08-13, Monsieur Carl T. Miller a ecrit:
> One of the guys at work is annoyed that openldap won't let
> a group be a member of a group.

That guy is wrong.

There are several ways of doing it. In the posixGroup objectClass
the member attribute can take another group as a value. It can also
be done with the groupOfNames objectClass. And there's at least one
other (but more complicated) way of doing it that uses ACLs. So it's
not a problem on the OpenLDAP side. Whether all LDAP clients are
capable of handling groups-within-groups properly is another matter.

Michael



More information about the mdlug mailing list