SLAPO-DYNGROUP(5) File Formats Manual SLAPO-DYNGROUP(5)

# [NAME](#NAME)

slapo-dyngroup - Dynamic Group overlay to slapd

# [SYNOPSIS](#SYNOPSIS)

/etc/openldap/slapd.conf

# [DESCRIPTION](#DESCRIPTION)

The Dynamic Group overlay allows clients to use LDAP Compare operations to test the membership of a dynamic group the same way they would check against a static group. Compare operations targeting a group's static member attribute will be intercepted and tested against the configured dynamic group's URL attribute.

Note that this intercept only happens if the actual Compare operation does not return a LDAP\_COMPARE\_TRUE result. So if a group has both static and dynamic members, the static member list will be checked first.

# [CONFIGURATION](#CONFIGURATION)

This **slapd.conf** option applies to the Dynamic Group overlay. It should appear after the **overlay** directive.

[**attrpair <memberAttr> <URLattr>**](#attrpair)

Specify the attributes to be compared. A compare operation on the *memberAttr* will cause the *URLattr* to be evaluated for the result.

# [EXAMPLES](#EXAMPLES)

```


  database mdb


  ...


  overlay dyngroup


  attrpair member memberURL
```

# [FILES](#FILES)

/etc/openldap/slapd.conf

default slapd configuration file

# [BACKWARD COMPATIBILITY](#BACKWARD_COMPATIBILITY)

The dyngroup overlay has been reworked with the 2.5 release to use a consistent namespace as with other overlays. As a side-effect the following cn=config parameters are deprecated and will be removed in a future release: **olcDGAttrPair** is replaced with olcDynGroupAttrPair **olcDGConfig** is replaced with olcDynGroupConfig

# [SEE ALSO](#SEE_ALSO)

[**slapd.conf**(5)](/man/os/openldap-2.6/slapd.conf.5), [**slapd-config**(5)](/man/os/openldap-2.6/slapd-config.5).

# [AUTHOR](#AUTHOR)

Howard Chu

2026/08/06 OpenLDAP 2.6.14

---

Document: slapo-dyngroup(5) from openldap-2.6 2.6.14-r0 (Chainguard OS)
Source: https://git.openldap.org/openldap/openldap.git