Overview#
Group, groupOfUniqueNames, groupOfNames#
Generally we find these three "names" used for LDAP Group Names.What is the difference? #
For the difference of groupOfUniqueNames vs groupOfNames is pretty clear.For the difference between groupOfUniqueNames vs groupOfNames and Group, it is more difficult. Some LDAP Server Implementations will alias Group to groupOfNames. Usually, groupOfUniqueNames will be a separate and distinct name.
- EDirectory does alais all three as group.
- Microsoft Active Directory has implemented their own Group with a separate OID. Microsoft Active Directory does also provide the "standard" groupOfUniqueNames.
Summary of LDAP Groups#
Name | OID | Member Attribute | Comments |
---|---|---|---|
group | 1.2.840.113556.1.5.8 | member | Specific to Active Directory Groups |
groupOfNames | 2.5.6.9 | member | Generic |
groupOfUniqueNames | 2.5.6.17 | uniqueMember | Generic (Also in Active Directory Groups) |
DynamicGroups and Static groups#
Generally LDAP Groups are:- DynamicGroups
- Static groups
- Virtual static groups - Some LDAP Server Implementations groups can be Virtual static groups (ie both).