GroupOfNames without members

Solution 1:

groupOfNames objects MUST have a cn attribute and a member attribute (see rfc2256 or look at your schema definition).

I'll be interested to hear from others but as far as I can tell your options are one of these:

  • Browse your schema to see if any other group-type objects exist that don't have a member attribute under the 'MUST' qualifier, and use it instead of groupOfNames

  • Use your existing workaround

  • See if someone has defined a different group object that better suits your needs and add it to your schema

(Or these, but don't do these)

  • Define your own custom group object and add it to your schema

  • Redefine the groupOfNames objectclass in your schema and move member from MUST to MAY. If you have a warranty, this will break it.