From 952ce880317825f16c256fb716167eb7fddeda49 Mon Sep 17 00:00:00 2001
From: rhaggard <rhaggard@localhost>
Date: Wed, 06 Feb 2008 18:09:50 +0000
Subject: [PATCH] Commiting configuration XML files after adding info from the old config guide to be incorporated in the new generated config reference
---
opends/src/admin/defn/org/opends/server/admin/std/MemberVirtualAttributeConfiguration.xml | 32 +++++++++++++++++++++++---------
1 files changed, 23 insertions(+), 9 deletions(-)
diff --git a/opends/src/admin/defn/org/opends/server/admin/std/MemberVirtualAttributeConfiguration.xml b/opends/src/admin/defn/org/opends/server/admin/std/MemberVirtualAttributeConfiguration.xml
index 501313e..e3c4f32 100644
--- a/opends/src/admin/defn/org/opends/server/admin/std/MemberVirtualAttributeConfiguration.xml
+++ b/opends/src/admin/defn/org/opends/server/admin/std/MemberVirtualAttributeConfiguration.xml
@@ -23,7 +23,7 @@
! CDDL HEADER END
!
!
- ! Portions Copyright 2007 Sun Microsystems, Inc.
+ ! Portions Copyright 2007-2008 Sun Microsystems, Inc.
! -->
<adm:managed-object name="member-virtual-attribute"
plural-name="user-defined-virtual-attributes"
@@ -33,14 +33,23 @@
<adm:synopsis>
The
<adm:user-friendly-name />
- is used to generate a member or uniqueMember attribute whose values
- are the DNs of the members of a specified group.
+ generates a member or uniqueMember attribute whose values are
+ the DNs of the members of a specified virtual static group.
</adm:synopsis>
<adm:description>
- This is used to implement virtual static group functionality, in
- which it is possible to create an entry which looks like a static
- group but obtains all of its membership from a dynamic group (or
- some other type of group, including another static group).
+ This component is used to implement virtual static group
+ functionality, in which it is possible to create an entry
+ that looks like a static group but obtains all of its
+ membership from a dynamic group (or some other type of
+ group, including another static group).
+ This implementation is most efficient when attempting to
+ determine whether a given user is a member of a group
+ (for example, with a filter like
+ "(uniqueMember=uid=john.doe,ou=People,dc=example,dc=com)")
+ when the search does not actually return the membership
+ attribute. Although it works to generate the entire set of
+ values for the member or uniqueMember attribute, this can be
+ an expensive operation for a large group.
</adm:description>
<adm:profile name="ldap">
<ldap:object-class>
@@ -70,10 +79,15 @@
the virtual attribute.
</adm:synopsis>
<adm:description>
- This can be a very expensive operation in some cases, and is not
- in-line with the primary function of virtual static groups, which
+ This operation can be very expensive in some cases and is not
+ consistent with the primary function of virtual static groups, which
is to make it possible to use static group idioms to determine
whether a given user is a member.
+ If this attribute is set to false, attempts to retrieve the entire
+ set of values receive an empty set, and only attempts to determine
+ whether the attribute has a specific value or set of values
+ (which is the primary anticipated use for virtual static groups)
+ are handled properly.
</adm:description>
<adm:default-behavior>
<adm:defined>
--
Gitblit v1.10.0