WAS v8.5 > Reference > SetsDynamic member attributes page
Use this page to manage LDAP dynamic member attributes.
To view this dmgr console page...
- In the dmgr console, click...
Security > Global security > User account repository > Available realm definitions > Federated repositories > Configure > Manage repositories [repository|Add] > Additional properties > Group attribute definition > Additional properties > Dynamic member attributes
- To configure for a specific domain in a multiple security domain environment, click...
Security domains > domain_name > Security Attributes > User Realm > Customize for this domain > Realm type > Federated repositories > Configure > Related items > Manage repositories
When you finish adding or updating federated repository configuration, to validate the changes, go to...
Security > Global security > Apply
Name
Name of the attribute that defines the filter for dynamic group members in LDAP. For example, memberURL is the name of a commonly used dynamic member attribute.
If both member and dynamic member attributes are specified for the same group type, this group type is a hybrid group with both static and dynamic members.
A dynamic group defines its members differently than a static group. Instead of listing the members individually, the dynamic group defines its members using an LDAP search. The filter for the search is defined in a dynamic member attribute. For example, the dynamic group uses the structural objectclass groupOfURLs, or auxiliary objectclass ibm-dynamicGroup, and the attribute memberURL, to define the search using a simplified LDAP URL syntax:
ldap:///<base DN of search>??<scope of search>?<searchfilter>
The following is an example of the LDAP URL that defines all entries that are under o=Acme with the objectclass=person:
ldap:///o=Acme,c=US??sub?objectclass=person
Object class
Object class of the group containing this dynamic member attribute, for example, groupOfURLs. If this property is not defined, the dynamic member attribute applies to all group object classes.
Reference:
Dynamic member attributes settings