Hi,

 

In our schema we need to have users who will belong to multiple groups. These groups are independent groups and do not have any parent child relationship. So while defining the ObjectClass for my user i have two options:

 

1) Have an attribute called - isMemberOf and make it of type distinguishedName. This will be a list of all groups to which a user belongs.

 

2) Have a multivalued attribute - groupName.

 

which option makes more sense. Assume the functionalities that i need to support are:

1) Search all users belonging to a group

2) edit a user to add/remove a group from profile

3) Delete all the users belonging to a group

 

regards,

Ankur