Dynamic Groups

Dynamic groups in LDAP should normally behave similarly to static groups in LDAP. However, some LDAP implementations require a modified search algorithm.

In order to perform this type of search with the JAAS modules, set the parameter: 

tibems.ldap.dynamic_group_search_direct="true"

It is recommended this is parameter be enabled after you have determined that there is a problem, or when using an OpenLDAP server. In some cases, this is required in order to mirror the former EMS server native LDAP functionality.