Problems creating a Samba4 LDAP Backend

Howard Chu hyc at
Thu Mar 20 00:33:24 GMT 2008

Andrew Bartlett wrote:
> On Wed, 2008-03-19 at 17:09 -0700, Howard Chu wrote:
>> It strikes me that the best approach is to just dynamically generate the
>> memberOf values instead of storing them statically. But that also depends on
>> your usage patterns.
> Well, searches on member and memberOf are common, so it seems we would
> quickly find ourselves downloading the whole backend DB and filtering
> locally...

Searching on memberOf doesn't make a lot of sense to me, when you could simply 
read the group object directly. When is this actually a useful thing to do? An 
alternative would be to make the memberOf overlay intercept these filters and 
rewrite them in terms of member.
   -- Howard Chu
   Chief Architect, Symas Corp.
   Director, Highland Sun
   Chief Architect, OpenLDAP

More information about the samba-technical mailing list