If your application only supports static groups but has scalability issues, then using a
virtual static group could be a possible solution. A virtual static group uses a virtual
attribute that is dynamically generated when called after which the operations that
determine group membership are passed to another group, such as a dynamic group. You
must use the ds-virtual-static-group
object class and the
ds-target-group-dn
virtual attribute.
Virtual static groups are best used when determining if a single user is a member of a
group. It is not a good solution if an application accesses the full list of group
members due to the performance expense at constructing the list. If you have a small
database and an application that requires that the full membership list be returned, you
must also enable the allow-retrieving-membership
property for the
Virtual Static uniqueMember
virtual attribute using the
dsconfig tool.
To create a virtual static group: