ldapopenldapouapache-directoryobject-class

How to create "dynamic group" in ldap?

I want to create dynamic group in openldap with Apache Directory Studio but groupOfURLs object class not available.

Apache Directory Studio add object class window

Solution

  • The dynamic group feature is not present by default (that's why you can't find the groupOfURLs object class). You need to define and add the dyngroup.schema to cn=config.

    The dyngroup definition can be found here : dyngroup.ldif

    Then, for the dynamic group feature to work, you need to enable the dynlist overlay, which also need to be defined, see slapo-dynlist.

    You can refer to this issue as a kind of walk through.