[squid-users] Réf. : Re: [squid-users] squid_ldap_group with 2 levels of group

Henrik,

thanks for the reply. Yes, I wanted to make some recursive membership in
groups, but I think I'll work in a different way and use some groups
containing only users according to your answer.

Best regards,

Stéphane

                                                                                                                                              
                      Henrik Nordstrom
                      <hno@squid-cache.org> Pour : sdavy@bics.fr
                                                cc : squid-users@squid-cache.org
                      02/12/2003 15:50 Objet : Re: [squid-users] squid_ldap_group with 2 levels of group
                                                                                                                                              
                                                                                                                                              

On Tue, 2 Dec 2003 sdavy@bics.fr wrote:

> I'd like to create group in a LDAP directory, and these groups would
> contain some other groups would should contain users. And of course, I'd
> like to match this ugly thing using squid_ldap_group.

Now you make me slightly confused.. is these groups member of the bigger
group, or is the bigger group a OU the other groups are located under?

The OU case is trivial.

The recursive group membership case of groups being members of groups is
not, and such group design will be very slow and complex to look up via
LDAP.

I would seriously recommend making the users direct members of the group.

Regards
Henrik
Received on Tue Dec 02 2003 - 07:59:23 MST