Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 95 / 532

Chapter 4, Managing Users and Groups 95
Creating Groups
• You can optionally also add a description for the new group.
• If any organizational units have been defined for your directory, you can
specify where you want the new group to be placed using the Add New
Group To list. The default location is your directory’s root point, or top-
most entry.
• When you are finished entering the desired information, click Create Group
to add the group and immediately return to the New Group form.
Alternatively, click Create and Edit Group to add the group and then
proceed to the Edit Group form for the group you have just added. For
information on editing groups, see “Editing Group Attributes,” on page 101.
To Create a Static Group
To create a static group entry, perform the following steps:
1.
Access the Enterprise Administration Server and choose the Users & Groups
tab.
2.
Click the New Group link.
3.
Enter the required information and click OK.
For more information, see “The New Group Page,” in the online help.
Dynamic Groups
A dynamic group has an
objectclass
of
groupOfURLs
, and has zero or
more
memberURL
attributes, each of which is a LDAP URL that describes a set
of objects.
Enterprise Server enables you to create a dynamic group when you want to
group users automatically based on any attribute, or when you want to apply
ACLs to specific groups which contain matching DNs. For example, you can
create a group that automatically includes any DN that contains the attribute
department=marketing
. If you apply a search filter for
department=marketing
, the search returns a group including all DNs
containing the attribute
department=marketing
. You can then define a
dynamic group from the search results based on this filter. Subsequently, you
can define an ACL for the resulting dynamic group.