Mailing-List: contact users-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@directory.apache.org
Received-SPF: pass (herse.apache.org: domain of akarasulu@gmail.com designates
 66.249.92.173 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:references:x-google-sender-auth;
        b=gTzn7OcY5CdH6zL5W1+5tcGxVIWTegoQF0hrpKTDT4jU5fL2kEQ0fcBFVKyc6yONRIpwxpMcwZe2LKgs+Ycn89OLJu2QU1BKEx2BsNsvTXHYTxYm2YPtj+hCd/oF/jzsHWqVTZNSX9yNbboeEWgJ5iPd+Tr878sR4qcRCBczrJo=
Message-ID: <a32f6b020705151213n827205bte3b408879f05fd58@mail.gmail.com>
Date: Tue, 15 May 2007 15:13:52 -0400
From: "Alex Karasulu" <akarasulu@apache.org>
Sender: akarasulu@gmail.com
To: users@directory.apache.org
Subject: Re: adding a group without members on create
In-Reply-To: <c80586cc0705141944k599347e6l11b5d6e98b9297ff@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_6878_5008467.1179256432246"
References: <c80586cc0705141944k599347e6l11b5d6e98b9297ff@mail.gmail.com>

------=_Part_6878_5008467.1179256432246
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Justen you might by default just add the admin user to the
groupOfUniqueNames
when creating it.  This user is always present and can be deleted later once
another
user is added to the group.  The DN for this user is:

uid=admin,ou=system

HTH,
Alex

On 5/14/07, Justen Stepka <jstepka@jstepka.name> wrote:
>
> The addGroup functionality in Crowd does not currently correctly
> implement an approach to add a user to ApacheDS. The issue here is
> that according the RFC-2256 the groupOfUniqueNames Object Class
> requires that the uniquemember field cannot be left blank (ie it is a
> required field).
>
> Currently our code is trying to get around this by adding a blank
> string into this field, but ApacheDS even with this approach does not
> allow this.
>
> Currently I do not have a solution beyond providing some kind of user
> picker on the add group page, so a person can choose a member to add
> to this group. However, we still need to take into account adding
> groups via our SOAP interface and also via the importers.
>
> http://jira.atlassian.com/browse/CWD-318
>
> I am wondering if there is a way that we can create a group with
> Apache DS and not have to provide any initial members so the group? If
> I put in an empty string I then need to know to ignore the empty
> uniquemember when processing the attributes on a search.
>
> Cheers,
>
> Justen
>
> --
> Justen Stepka
> http://www.jstepka.name/blog/
>

------=_Part_6878_5008467.1179256432246--