Re: [squid-users] squid_ldap_group with 2 levels of group

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Tue, 2 Dec 2003 15:50:21 +0100 (CET)

On Tue, 2 Dec 2003 sdavy@bics.fr wrote:

> I'd like to create group in a LDAP directory, and these groups would
> contain some other groups would should contain users. And of course, I'd
> like to match this ugly thing using squid_ldap_group.

Now you make me slightly confused.. is these groups member of the bigger
group, or is the bigger group a OU the other groups are located under?

The OU case is trivial.

The recursive group membership case of groups being members of groups is
not, and such group design will be very slow and complex to look up via
LDAP.

I would seriously recommend making the users direct members of the group.

Regards
Henrik
Received on Tue Dec 02 2003 - 07:50:28 MST

This archive was generated by hypermail pre-2.1.9 : Thu Jan 01 2004 - 12:00:04 MST