SLAPO-DYNGROUP(5) File Formats Manual SLAPO-DYNGROUP(5)
NAME
slapo-dyngroup - Dynamic Group overlay to slapd
SYNOPSIS
/etc/ldap/slapd.conf
DESCRIPTION
The Dynamic Group overlay allows clients to use LDAP Compare operations
to test the membership of a dynamic group the same way they would check
against a static group. Compare operations targeting a group's static
member attribute will be intercepted and tested against the configured
dynamic group's URL attribute.
Note that this intercept only happens if the actual Compare operation
does not return a LDAP_COMPARE_TRUE result. So if a group has both sta-
tic and dynamic members, the static member list will be checked first.
CONFIGURATION
This slapd.conf option applies to the Dynamic Group overlay. It should
appear after the overlay directive.
attrpair <memberAttr> <URLattr>
Specify the attributes to be compared. A compare operation on the
memberAttr will cause the URLattr to be evaluated for the result.
EXAMPLES
database mdb
...
overlay dyngroup
attrpair member memberURL
FILES
/etc/ldap/slapd.conf
default slapd configuration file
BACKWARD COMPATIBILITY
The dyngroup overlay has been reworked with the 2.5 release to use a
consistent namespace as with other overlays. As a side-effect the fol-
lowing cn=config parameters are deprecated and will be removed in a fu-
ture release: olcDGAttrPair is replaced with olcDynGroupAttrPair olcDG-
Config is replaced with olcDynGroupConfig
SEE ALSO
slapd.conf(5), slapd-config(5).
AUTHOR
Howard Chu
OpenLDAP 2.6.10+dfsg-1 2025/05/22 SLAPO-DYNGROUP(5)
Generated by dwww version 1.16 on Tue Dec 16 04:46:48 CET 2025.