HP-UX Directory Server 8.1 administrator guide

NOTE:
Managing groups is significantly easier by using the memberOf attribute to identify in user
entries to what groups a user belongs. The memberOf attribute is maintained by the Directory
Server and updated automatically on entries as group membership changes. For information on
using the memberOf attribute, see “Using the memberOf Attribute to manage group membership
information”.
5.4.1 Managing static groups
Static groups organize entries by specifying the same group value in the DN attribute of any
number of users.
NOTE:
If a user has an entry on a remote Directory Server (for example, in a chained database), different
from the Directory Server, which has the entry that defines the static group, then use the
Referential Integrity plug-in to ensure that deleted user entries are automatically deleted from
the static group.
There are some performance and access control considerations with the Referential Integrity
plug-in. For more information about using referential integrity with chaining, see “Configuring
the chaining policy”.
1. In the Directory Server Console, select the Directory tab.
2. In the left pane, right-click the entry under which to add a new group, and select
New→Group.
218 Organizing entries with roles, class of service, and views