On Thu, 6 May 2010, aurfalien at gmail.com wrote: >> In short: >> >> 1. Define the posixGroup DN >> 2. Add one or more memberUid entries. > > O, I think I follow. > > Say my current group definition in ldap is; > > # pm, groups, foo.bar > dn: cn=pm,ou=groups,dc=foo,dc=bar > objectClass: top > objectClass: posixGroup > cn: pm > gidNumber: 200 > > > So would I extend this and add members there instead of in there own > entry? How would it look? memberUid: bob memberUid: chad memberUid: dave etc... -- Paul Heinlein <> heinlein at madboa.com <> http://www.madboa.com/