Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 94 / 532

Creating Groups
94 Netscape Enterprise Server Administrator’s Guide
and contains
uniqueMembers
and/or
memberURLs
and/or
memberCertDescriptions
. For static groups, the members do not share a
common attribute except for the
CN=<Groupname>
attribute.
Dynamic groups allow you to use a LDAP URL to define a set of rules that
match only for group members. For Dynamic Groups, the members do share a
common attribute or set of attributes that are defined in the
memberURL
filter.
For example, if you need a group that contains all employees in Sales, and they
are already in the LDAP database under “
ou=Sales,o=Airius.com
,” you’d
define a dynamic group with the following
memberurl
:
ldap:///ou=Sales,o=Netscape??sub?(uid=*)
This group would subsequently contain all objects that have an
uid
attribute in
the tree below the “
ou=Sales,o=Netscape
” point; thus, all the Sales
members.
For static and dynamic groups, members can share a common attribute from a
certificate if you use the
memberCertDescription
. Note that these will only
work if the ACL uses the SSL method.
Once you create a new group, you can add users, or members, to it.
This section includes the following topics for creating groups:
• Static Groups
• Dynamic Groups
Static Groups
Enterprise Administration Server enables you to create a static group by
specifying the same group attribute in the DNs of any number of users. A static
group doesn’t change unless you add a user to it or delete a user from it.
Guidelines for Creating Static Groups
Consider the following guidelines when using the Enterprise Administration
Server forms to create new static groups:
• Static groups can contain other static or dynamic groups.