Grouper Developers Forum

[Tom Zeller <>]

>>  dn : cn=groupA,ou=groups
>>  member: cn=memberA,ou=people
>>  member: cn=memberB,ou=people
>>  member: cn=groupB,ou=people
>
> Why still have cn=groupB as member of cn=groupA, if you already
> included all of cn=groupB's members in cn=groupA?

For humans or applications that may be interested in the hierarchical
structure of group memberships. Not a convincing argument, hence my
survey.

>> And, do you want to provision memberOf with the same structure ?
>
> If memberOf is maintained by the DSA itself there really is no choice
> what's written there, I would assume?

Right. The memberOf attribute will match how the member attribute is
provisioned.