Send to a Friend

chuboy's avatar

What is the best LDAP structure when you want users being part of multiple groups?

Asked by chuboy (86points) September 30th, 2009

I’m relatively new to LDAP. I have open-ldap LDAP v3 installed. I’ve seen things like this:

dn: cn=Giuseppe LoBiondo, ou=people, dc=yourorg, dc=com
cn: Giuseppe Lo Biondo
sn: Lo Biondo
objectclass: top
objectclass: person
objectclass: posixAccount
objectclass: shadowAccount
uid:giuseppe
userpassword:{crypt}$1$ss2ii(0$gbs*do&@=)eksd
uidnumber:104
gidnumber:100
gecos:Giuseppe Lo Biondo
loginShell:/bin/zsh
homeDirectory: /home/giuseppe
shadowLastChange:10877
shadowMin: 0
shadowMax: 999999
shadowWarning: 7
shadowInactive: -1
shadowExpire: -1
shadowFlag: 0

dn: cn=mygroup, ou=groups, dc=yourorg, dc=com
objectclass: top
objectclass: posixGroup
cn: mygroup
gidnumber: 100
memberuid: giuseppe
memberuid: anotheruser

—-

I’ve also seen setups where you don’t have memberuid, but rather just member. Any suggestions or resources?

Using Fluther

or

Using Email

Separate multiple emails with commas.
We’ll only use these emails for this message.