François Beretti wrote:
I want two things :
1) to be able to get the groups of a user by reading an attribute of
the user
2) to be able to get the groups of the groups of a user by reading an
attribute of the user
I am not sure I can replace totally an ldap search (matching some
criteria) result with a custom value.
This sounds quite like 'roles'. You might take a look at that code
and see if it'll work for you, or work with some minor modifications.