Red Hat 8.1, Command Reference Manual

Page: 223 / 372

MemberOf Plug-in Attributes
209
This is required to set up distributed numeric assignments for an attributes.
Parameter Description
Entry DN cn=Distributed Numeric Assignment Plugin,
cn=plugins, cn=config
Valid Range Any Directory Server attribute
Default Value None
Syntax DirectoryString
Example dnaType: uidNumber
3.8. MemberOf Plug-in Attributes
Group membership is defined within group entries using an attribute such as
member
. Searching
for the
member
attribute makes it easy to list all of the members for the group. However, group
membership is not reflected in the member's user entry, so it is impossible to tell to what groups a
person belongs by looking at the user's entry.
The MemberOf Plug-in synchronizes the group membership in group members with the members'
individual directory entries by identifying changes to a specific attribute (such as
member
) in the group
entry and then carrying those changes over to a specific attribute in the entries for the members.
3.8.1. memberofattr
This attribute specifies the attribute in the user entry for the Directory Server to manage to reflect
group membership. The MemberOf Plug-in generates the value of the attribute specified here in the
directory entry for the member. There is a separate attribute for every group to which the user belongs.
Parameter Description
Entry DN cn=MemberOf Plugin, cn=plugins, cn=config
Valid Range Any Directory Server attribute
Default Value memberOf
Syntax DirectoryString
Example memberofattr: memberOf
3.8.2. memberofgroupattr
This attribute specifies the attribute in the group entry to use to identify the DNs of group members.
By default, this is the
member
attribute, but it can be any membership-related attribute, such as
uniqueMember
or
member
.
NOTE
Any attribute can be used for the
memberofgroupattr
value, but the MemberOf Plug-
in only works if the value of the target attribute contains the DN of the member entry. For
example, the
member
attribute contains the DN of the member's user entry:
member: uid=jsmith,ou=People,dc=example,dc=com