GroupOfNames without members
Solution 1:
groupOfNames
objects MUST have a cn
attribute and a member
attribute (see rfc2256 or look at your schema definition).
I'll be interested to hear from others but as far as I can tell your options are one of these:
Browse your schema to see if any other group-type objects exist that don't have a member attribute under the 'MUST' qualifier, and use it instead of
groupOfNames
Use your existing workaround
See if someone has defined a different group object that better suits your needs and add it to your schema
(Or these, but don't do these)
Define your own custom group object and add it to your schema
Redefine the
groupOfNames
objectclass in your schema and movemember
from MUST to MAY. If you have a warranty, this will break it.