If your application only supports static groups but has scalability issues, then using a
virtual static group could be a possible solution. A virtual static group uses a virtual
attribute that is dynamically generated when called after which the operations that determine
group membership are passed to another group, such as a dynamic group. You must use the
ds-virtual-static-group
object class and the
ds-target-group-dn
virtual attribute.
Virtual static groups are best used when determining if a single user is a member of a group.
It is not a good solution if an application accesses the full list of group members due to the
performance expense at constructing the list. If you have a small database and an application
that requires that the full membership list be returned, you must also enable the
allow-retrieving-membership
property for the Virtual Static
uniqueMember
virtual attribute using the dsconfig
tool.