title: Openldap + dynlist + posixGroup
body: <p>I have problem with OpenLdap and permission to file.</p>
  
  <p>First - I set this in my slapd.conf:</p>
  
  <pre><code>overlay         dynlist
  dynlist-attrset labeledURIObject labeledURI
  </code></pre>
  
  <p>Second - I make cn=test,ou=Projects,dc=example,dc=com with:</p>
  
  <pre><code>dn: cn=test,ou=Projects,dc=example,dc=com
  gidNumber: 6789
  objectClass: posixGroup
  objectClass: top
  objectClass: labeledURIObject
  labeledURI: ldap:///cn=testgroup,ou=Groups,dc=example,dc=com?memberUid?sub?
  (objectClass=posixGroup)
  memberUid: user1 (dynamic)
  memberUid: user2 (dynamic)
  </code></pre>
  
  <p>in <code>cn=testgroup,ou=Groups,dc=example,dc=com</code> i have memberuid: user1 and memberUid: user2</p>
  
  <p>Third - when i made getent group test I have:</p>
  
  <pre><code>test:*:6789:user1,user2
  </code></pre>
  
  <p>But when I try id user1 i didn't see this group :(</p>
  
  <p>And next I set <code>chmod 770 dir</code> and <code>chown root.test dir</code> and try access to this dir.</p>
  
  <p>But of course it is not possible because the user is not in this group (that said "id").</p>
  
  <p>Does anyone know the solution?</p>