Red Hat DIRECTORY SERVER 8.0, Руководство администратора

Страница: 158 / 552

Chapter 5. Managing Entries with Roles, Classes of Service, and Views
140
ldapdelete -D "cn=directory manager" -w secret -h host -p 389 "ou=Example
View,dc=example,dc=com"
2. Remove the view entry. It is not necessary to remove any entries included in the view.
dn: ou=Example View,dc=example,dc=com
objectClass: top
objectClass: organizationalunit
objectClass: nsview
ou=Example View
nsViewFilter: l=Mountain View
description: Example View
5.4. Using Groups
Groups are a mechanism for associating entries for ease of administration. This mechanism was
provided with previous versions of Directory Server and should be used primarily for compatibility with
older versions of the server.
5.4.1. Managing Static Groups
Static groups organize entries by specifying the same group value in the DN attribute of any number of
users. This section includes the following procedures for creating and modifying static groups:
•
Section 5.4.1.1, “Adding a New Static Group”
•
Section 5.4.1.2, “Modifying a Static Group”
NOTE
If a user has an entry on a remote Directory Server (for example, in a chained database),
different from the Directory Server which has the entry that defines the static group, then
use the Referential Integrity plug-in to ensure that deleted user entries are automatically
deleted from the static group, but there are some performance and access control
considerations. For more information about using referential integrity with chaining, refer
to
Section 3.3.1, “Configuring the Chaining Policy”
.
5.4.1.1. Adding a New Static Group
1. In the Directory Server Console, select the
Directory
tab.
2. In the left pane, right-click the entry under which to add a new group, and select
New > Group
.
Alternatively, go to the
Object
menu and select
New > Group
.
3. Click
General
in the left pane. Type a name for the new group in the
Group Name
field.
The group name is required.
4. Enter a description of the new group in the
Description
field.