[IPA] Attribute Linking and Indexing

[Andrew Bartlett]

On Tue, 2009-10-06 at 23:31 -0400, Endi Sukma Dewata wrote:
> Andrew,
> 
> This is a continuation of the previous discussion about extended DN problem.
> There are 2 issues that need to be solved, please take a look at these pages:
> - Attribute linking: http://www.freeipa.org/page/Samba_4_Attribute_Linking
> - Attribute indexing: http://www.freeipa.org/page/Samba_4_Attribute_Indexing

As I have come to expect, this is another analysis of the problem and a
correct proposal for the solution.  It would be good to ensure that
these pages stay around long-term, as they describe the behaviour and
requirements of Samba and both backends very well.  

> DS has "Linked Attributes" and "MemberOf" plugins which can be used to link
> objects. The "Linked Attributes" plugin is a generic attribute linking
> similar to the linked_attributes LDB module. The "MemberOf" plugin can flatten
> nested groups (i.e. the memberOf attribute will contain all groups to which the
> user directly or indirectly belongs), but it doesn't seem to be possible to
> configure multiple instances of this plugin. Does Samba need to flatten the
> groups?

Quite the opposite - Samba requires that groups not be flattened. 

I've been impressed by the proposals.  Now I just look forward to the
patches!

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20091007/5e64fdb4/attachment.pgp>