Hello,
Just checking if it is possible to add a parameter to the LDAP_PROPERTIE's config value to specify the 'returning attributes' of the filters, more specifically, the 'membership.filter'.
The membership filter is usually configured like this:
- membership.filter=(&(uniquemember\=%M)(objectclass\=groupofuniquenames))
It would be interesting if we could run a command like this:
- # filter : (&(objectclass=inetOrgPerson)(uid=X120365))
- # attributes : ibm-allGroups
This is a special attribute calculated at runtime by Tivoli Directory Server, it provides a list of all the groups that the user is associated to. Gathering the groups associated to a specific user instead of traversing all the groups to see if he's a member seems like a better option, right? Please let me know if anyone was ever able to implement something similar to the second query.
Kind regards,
-
Marcelo R.
