Hello! I'm newbie to Fedora Directory, but is has two significant features - acl and nested roles. But I could find a way to use roles as groups. That is - I'd like to define role, and then use this to define posix group, which I can use via nss_ldap on my servers. At first glance it seems that dynamic groups will do what I want - I just defined filter to include all users with particular role in group. But unfortunately dynamic groups aren't resolved by server, you need client aplication to do that :( So the question is: is there any way to do this without writing my own slapi plugin? Thanks! --- Grzegorz Marsza?ek graf0 at post.pl