GROUP TEMPLATES mapping table

The  mapping table provides a way to support multiple ways of defining group membership: it extends the   MTA option approach, allowing use of different "DN expansion templates" to combine with the values coming from the LDAP attributes named by the   and   MTA options.

The LDAP attributes named by the   and   MTA options are typically used to specify DNs, which are then expanded to find user entries using the URL template specified via the   MTA option. By setting a different sort of value for the  MTA option, a different sort of DN expansion approach could be used -- but it would then apply to all values of the LDAP attributes named by both   and. The  mapping table, in contrast, can select alternate expansion approaches based on  LDAP attribute name and value, thereby allowing support for multiple, different ways of expanding DNs to determine group membership.

When a  mapping table exists, it will be probed each time a group has an LDAP attribute named by the   or   MTA option to expand. The probe form is: object-classes&#x7c;attribute-name&#x7c;attribute-value where  is a plus-separated list of the object classes associated with the  current LDAP entry,    is the name of the group "DN" attribute being expanded (i.e., the LDAP attribute name specified for either   or  ), and   is that attribute&#x27;s current value.

If the mapping sets the  output flag, then the mapping output string will be used as the template for this attribute&#x27;s expansion in place of using the value of    as the template. If the mapping sets the  output flag, then the attribute will be silently ignored.

See also:
 * group_dn_template MTA Option
 * ldap_group_dn MTA Option
 * ldap_group_dn2 MTA Option
 * Indirect or alternate criteria for list membership