# add group ou dn: ou=Groups,dc=example,dc=com changetype: add ou: Groups description: Group objectClass: top objectClass: organizationalUnit # add people ou dn: ou=People,dc=example,dc=com changetype: add ou: People description: People objectClass: top objectClass: organizationalUnit # add an authorized user (belongs to the group webappgroup) dn: uid=treydrake,ou=People,dc=example,dc=com changetype: add objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson uid: treydrake cn: Trey Drake sn: Drake givenName: Trey userPassword: password # add an authorized user (this user will not be added to the webappgroup membership list) dn: uid=noaccessuser,ou=People,dc=example,dc=com changetype: add objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson uid: noaccessuser cn: No Access sn: access givenName: no userPassword: noaccess # add user to the webapp group # dn: cn=webappgroup,ou=Groups,dc=example,dc=com changetype: add objectClass: top objectClass: groupOfUniqueNames uniqueMember: uid=treydrake,ou=People,dc=example,dc=com cn: webappgroup