[Tickets #9762] Re: attrisdn in the Groups LDAP Setup does not work?

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/9762
------------------------------------------------------------------------------
  Ticket             | 9762
  Updated By         | Klaus.Steinberger at Physik.Uni-Muenchen.DE
  Summary            | attrisdn in the Groups LDAP Setup does not work?
  Queue              | Horde Base
  Version            | 4.0-RC2
  Type               | Bug
  State              | Feedback
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             |
+New Attachment     | group.ldif
------------------------------------------------------------------------------


Klaus.Steinberger at Physik.Uni-Muenchen.DE (2011-04-01 07:00) wrote:

> This feature was completely broken in Horde 3, at least it created  
> an invalid filter string at one point. That's why I dropped it  
> during the refactoring, since obviously nobody used it. Seems like I  
> was wrong.
>
> Can you provide some LDIF examples of real-world groups that use  
> full DNs for group members?

yes of course. I anonymized the example of course, and removed some  
atributes only relevant to Edirectory.

Please note, that both the people and the group container in our  
directory have a non-flat structure.

The structure here is:

ou=Campus,ou=Personen,o=physik   (most of the accounts coming from the  
university metadirectory)
ou=Local,ou=Personen,o=physik  (accounts local to our directory)
ou=Email-Only,o=physik (account with not unix attributes)

ou=Gruppen,o=physik  (groups with general relevance)
ou=somechair,ou=Gruppen,o=physik  (groups with relevance to one of our chairs)