Re: [squid-users] squid_ldap_group

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 19 Nov 2003 18:09:36 +0100 (CET)

On Wed, 19 Nov 2003, Maurer Roland MKG-Bank wrote:

> uniqueMember: uid=rma,ou=People,dc=floersheim,dc=myfirm,dc=de
> uniqueMember: uid=test,ou=People,dc=floersheim,dc=myfirm,dc=de
>
> The query in the squid _ldap_group is
>
> squid_ldap_group -b "ou=Groups,dc=floersheim,dc=myfirm,dc=de" -f
> "(&(objectClass=univentionGroup)(cn=internet*)(uniqueMember=uid=%u))" -h
> 192.168.22.230

You probably need to use the user search mode of the helper (-F flag) to
first locate the users DN, then match this to the group. The uniqueMember
attribute is using full DN values.

> In the question I just want to select a "uid" out of the group.

You might be able to do so by searching for "uid=%u,*", but if the group
is large then first looking up the users DN is quite likely a lot faster
for the LDAP server to process..

Regards
Henrik
Received on Wed Nov 19 2003 - 10:09:40 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:21:23 MST