DO NOT REPLY [Bug 38515] - Dynamic LDAP Group Support

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=38515>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=38515





------- Additional Comments From bnicholes@apache.org  2006-04-18 18:53 -------
The direction that the patch is taking seems reasonable but there appears to 
be some problems.  First, just adding a call to 
util_ldap_cache_comparedynamicgroup() in the ldap-group tag probably won't 
work.  ldap-group can take a number of groups and the patch doesn't seem to be 
able to handle a set of mixed static and dynamic groups.  You may need to have 
some way of detecting wheither a particular group is static or dynamic and 
then handle it from there.  Also since util_ldap is suppose to be a set of 
generic cross platform LDAP APIs, the function 
util_ldap_cache_comparedynamicgroup() seems a little specialized considering 
the scope of the other util_ldap APIs.

Obviously you will also have to fix the code in 
util_ldap_cache_comparedynamicgroup()to respect the search attribute and scope 
rather than hardcoding "uid" and "LDAP_SCOPE_SUBTREE".  You will also need to 
implement the caching somehow as well but that should be fairly similar to the 
way that user/group caching already works.  In fact you could probably just 
use the same cache but with a different attribute as the the key rather 
than "member" or "uniqueMember".

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org