Enlisting DirXML to Manage groupMemberships
Novell Cool Solutions: Tip
By Raymon Epping
Digg This -
Posted: 14 Feb 2003
Create a user in eDirectory with groupMembership attribute filled in.
Normally you only fill in the Group Membership attribute because DirXML will sync the reference to the Groupmembership. That means that you don't have to modify the related group object itself.
This works fine, except for one thing... let's say that you want to use that group for granting ZENworks applications to users. This will not work because the Security Equals attribute is not filled in by DirXML.
When you want to add a user to a group by using a stylesheet, add the Security equals attribute to the user and fill in the Security Equals attribute.
<!-- =================================================== --> <!-- Template: create Group Membership(Courses) --> <!-- Remember to define the Security Equals to attribute --> <!-- =================================================== --> <xsl:template name="create-group-membership"> <xsl:param name="group-src-dn"/> <add-attr attr-name="Group Membership"> <add-value> <value type="dn"> <xsl:value-of select="$group-src-dn"/> </value> </add-value> </add-attr> <add-attr attr-name="Security Equals"> <add-value> <value type="dn"> <xsl:value-of select="$group-src-dn"/> </value> </add-value> </add-attr> </xsl:template>
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com