- No. OpenLDAP doesn't, for a start, unless you configure it specifically, using a non-default overlay.
- No.
- A virtual attribute implies a search every time it is evaluated. You might not want to pay the price.
What are the caveats of using 'isMemberOf' virtual attribute to determine a user's group membership?
-
19-09-2022 - |
Question
Do all LDAP servers support this virtual attribute (by default)?
I read that we have to enable this virtual attribute before using it. Is this how it works for all LDAP servers? Isn't this enabled by default?
Are there any other drawbacks of using this to determine a user's group membership?
Solution
Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow