This documentation describes something in development This documentation describes either documentation for something in development or a planned requirement which is not yet ready for production use. Expect changes.

groups have no member-loops

This requirement has no options.

Purpose

Warns when the section groups members contain that group as a member; i.e., group A contains group B as a member and group B contains group A as a member.

Notes

One should never have or need circular group membership. Groups should not contain themselves as a member (no matter how long the circular reference). Circular group membership will not be flagged as a problem by the directory service and one can easily create circular groups with as few as two groups (A contains B and B contains A). This requirement will warn about circular group membership involving any number of groups.

This requirement may not be repeated in the same section.

Examples

# Warns when any staff group contains a member which includes itself.
[group:ad.uillinois.edu/Urbana/My Unit/Departmental Groups/\*]
groups have no member-loops

Example output

Line 5: The following AD groups show group member loops:

Group name	has members	and is a member of
unit-Accountants department	wislande; kim300; jbntest; unit-Marketing department	unit-All staff; unit-Marketing department
unit-Marketing department	nelshopp; unit-Accountants department	unit-All staff; unit-Accountants department