d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrewsuser-friendly-name=Member Virtual Attribute

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsuser-friendly-plural-name=User Defined Virtual Attributes

71cef386fae61275b03e203825680b39fedaa8c6Tinderbox Usersynopsis=The Member Virtual Attribute generates a member or uniqueMember attribute whose values are the DNs of the members of a specified virtual static group.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsdescription=This component is used to implement virtual static group functionality, in which it is possible to create an entry that looks like a static group but obtains all of its membership from a dynamic group (or some other type of group, including another static group). This implementation is most efficient when attempting to determine whether a given user is a member of a group (for example, with a filter like "(uniqueMember=uid=john.doe,ou=People,dc=example,dc=com)") when the search does not actually return the membership attribute. Although it works to generate the entire set of values for the member or uniqueMember attribute, this can be an expensive operation for a large group.

5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox Userproperty.allow-retrieving-membership.synopsis=Indicates whether to handle requests that request all values for the virtual attribute.

5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox Userproperty.allow-retrieving-membership.description=This operation can be very expensive in some cases and is not consistent with the primary function of virtual static groups, which is to make it possible to use static group idioms to determine whether a given user is a member. If this attribute is set to false, attempts to retrieve the entire set of values receive an empty set, and only attempts to determine whether the attribute has a specific value or set of values (which is the primary anticipated use for virtual static groups) are handled properly.

5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox Userproperty.attribute-type.synopsis=Specifies the attribute type for the attribute whose values are to be dynamically assigned by the virtual attribute.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsproperty.base-dn.synopsis=Specifies the base DNs for the branches containing entries that are eligible to use this virtual attribute.

d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrewsproperty.base-dn.description=If no values are given, then the server generates virtual attributes anywhere in the server.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsproperty.base-dn.default-behavior.alias.synopsis=The location of the entry in the server is not taken into account when determining whether an entry is eligible to use this virtual attribute.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsproperty.conflict-behavior.synopsis=Specifies the behavior that the server is to exhibit for entries that already contain one or more real values for the associated attribute.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsproperty.conflict-behavior.syntax.enumeration.value.merge-real-and-virtual.synopsis=Indicates that the virtual attribute provider is to preserve any real values contained in the entry and merge them with the set of generated virtual values so that both the real and virtual values are used.

fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox Userproperty.conflict-behavior.syntax.enumeration.value.real-overrides-virtual.synopsis=Indicates that any real values contained in the entry are preserved and used, and virtual values are not generated.

14a656f94b1fd0ababd84a772228dfa52276ba15Evan Huntproperty.conflict-behavior.syntax.enumeration.value.virtual-overrides-real.synopsis=Indicates that the virtual attribute provider suppresses any real values contained in the entry and generates virtual values and uses them.

cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox Userproperty.enabled.synopsis=Indicates whether the Member Virtual Attribute is enabled for use.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsproperty.filter.synopsis=Specifies the search filters to be applied against entries to determine if the virtual attribute is to be generated for those entries.

9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updaterproperty.filter.description=If no values are given, then any entry is eligible to have the value generated. If one or more filters are specified, then only entries that match at least one of those filters are allowed to have the virtual attribute.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsproperty.filter.syntax.string.pattern.synopsis=Any valid search filter string.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsproperty.group-dn.synopsis=Specifies the DNs of the groups whose members can be eligible to use this virtual attribute.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsproperty.group-dn.description=If no values are given, then group membership is not taken into account when generating the virtual attribute. If one or more group DNs are specified, then only members of those groups are allowed to have the virtual attribute.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsproperty.group-dn.default-behavior.alias.synopsis=Group membership is not taken into account when determining whether an entry is eligible to use this virtual attribute.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrewsproperty.java-class.synopsis=Specifies the fully-qualified name of the virtual attribute provider class that generates the attribute values.

5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews