Fran?ois Beretti wrote: > > I want two things : > 1) to be able to get the groups of a user by reading an attribute of > the user > 2) to be able to get the groups of the groups of a user by reading an > attribute of the user > > I am not sure I can replace totally an ldap search (matching some > criteria) result with a custom value. This sounds quite like 'roles'. You might take a look at that code and see if it'll work for you, or work with some minor modifications.