In many cases, electing to use virtual static groups in place of static groups can produce marked performance gains without any need to update client applications. The specifics of a migration to virtual static groups varies depending on the original DIT, but the general approach involves identifying common membership traits for all members of each group and then expressing those traits in the form of an LDAP URL.
In the following example, the common membership trait for all members of the All Users group
is the parent DN ou=People,dc=example,dc=com. In other cases, a common attribute may need to
be used. For example, groups based on the location of its members could use the
l (location) or
st (state) attribute.