SLAPO-DYNGROUP(5)

SLAPO-DYNGROUP 💅✨

okay bestie, welcome to the File Formats Manual corner of the OpenLDAP house 🏠 — this is slapo-dyngroup, aka the Dynamic Group overlay for slapd, and no cap it's lowkey iconic.

✨ NAME ✨

slapo-dyngroup — the Dynamic Group overlay to slapd 🫶

🌸 SYNOPSIS 🌸

/etc/openldap/slapd.conf

👑 DESCRIPTION 👑

so here's the vibe: the Dynamic Group overlay lets clients use LDAP Compare operations to test whether someone is in a dynamic group — the exact same way they'd check a static group. the whole point is that it Just Works™ and the client never even knows. 🪄

when a Compare operation targets a group's static member attribute, it gets intercepted and instead tested against the configured dynamic group's URL attribute. sneaky? yes. effective? also yes. 💅

ok but real talk — this intercept only happens if the actual Compare operation did not already return a LDAP_COMPARE_TRUE result. so if a group has both static and dynamic members, the static member list gets checked first, periodt. 🎀

🎀 CONFIGURATION 🎀

this slapd.conf option applies to the Dynamic Group overlay, and it should appear after the overlay directive — order matters bestie, don't skip the line 🙈

• attrpair <memberAttr> <URLattr> — tells slapd which attributes get compared. a compare operation on the memberAttr will cause the URLattr to be evaluated for the result. that's it, that's the whole job. ⭐

🦋 EXAMPLES 🦋

here's the little glow-up in action:

database mdb
...
overlay dyngroup
attrpair member memberURL

🍓 FILES 🍓

• /etc/openldap/slapd.conf — the default slapd configuration file 📁

💜 BACKWARD COMPATIBILITY 💜

ngl the dyngroup overlay got a whole makeover in the 2.5 release so it could use a consistent namespace like all the other overlays. main character consistency era ✨

but as a side-effect, these cn=config parameters are deprecated and will be removed in a future release, so pls migrate:

• olcDGAttrPair is replaced with olcDynGroupAttrPair
• olcDGConfig is replaced with olcDynGroupConfig

bestie if you're still using the old names, this is your sign to switch 🚨 they're on the way out and we don't want you getting caught lacking.

🌈 SEE ALSO 🌈

• slapd.conf(5)
• slapd-config(5)

⭐ AUTHOR ⭐

Howard Chu 👑

---

and that's the whole page fr fr 🫶 this was OpenLDAP 2.7.2, dated 2026/10/21, and it ate. bye bestie, go configure something iconic 💖✨