To create an inverted static group, do the following:
  1. Open a text editor and create a group entry in LDIF:
    1. Include the ds-inverted-static-group object class.
    2. If you don't have ou=groups set up in your server, add it in the same file.
    3. Save the file.

    This example LDIF file, inverted-static-group.ldif, creates one group, cn=Example Inverted Static Group.

    dn: cn=Example Inverted Static Group,ou=groups,dc=example,dc=com
    objectclass: top 
    objectclass: ds-inverted-static-group
    cn: Example Inverted Static Group
    ou: groups
  2. To add the group entries to the server, use the ldapmodify tool.
    $ bin/ldapmodify --defaultAdd --filename inverted-static-group.ldif