multicast group with IP_ADD_MEMBERSHIP socket option. 该方法通知系统内核使用 IP_ADD_MEMBERSHIP 套接字选项将套接字加入一个组 播组。 If multicastAddress is not specified, the OS will try to add membership to all valid interfaces. [multicastInterface]) Opposite of addMembership - tells the kernel to leave a multicast group with IP_DROP_MEMBERSHIP socket option. This is automatically called by the kernel when the socket is closed or process addMembership 相反，该方法通知系统内核使用 IP_DROP_MEMBERSHIP 选 项使套接字脱离组播组。由于当套接字关闭或进程终止时该操作会自动执行， 所以大部分的应用不需要手动调用该方法。 If multicastAddress is not specified, the OS will try to drop membership to all valid interfaces. 如果

141 默认情况下，如果要同步的组包含其条目在成员查询中定义范围之外的成员，组同步会失败并显示以下错 误： Error determining LDAP group membership for "": membership lookup for user "" in group "" failed because of "search for entry with 可以让组同步继续进行。范围之外的成员将被 忽略。 同样，当组同步过程未能找到某个组的某一成员时，它会彻底失败并显示错误： Error determining LDAP group membership for "": membership lookup for user "" in group "" failed because of "search for entry with base dn="" refers to a non- existent entry". Error determining LDAP group membership for "": membership lookup for user "" in group "" failed because of "search for entry with

AuthLDAPGroupAttributeIsDN Directive Description: Use the DN of the client username when checking for group membership Syntax: AuthLDAPGroupAttributeIsDN on|off Default: AuthLDAPGroupAttributeIsDN on Context: directory this directive says to use the distinguished name of the client username when checking for group membership. Otherwise, the username will be used. For example, assume that the client sent the username bjenson ldap-group authorization provider. This example allows a single authorization location to check group membership within multiple ldap hosts:

AuthLDAPGroupAttributeIsDN Directive Description: Use the DN of the client username when checking for group membership Syntax: AuthLDAPGroupAttributeIsDN on|off Default: AuthLDAPGroupAttributeIsDN on Context: directory this directive says to use the distinguished name of the client username when checking for group membership. Otherwise, the username will be used. For example, assume that the client sent the username bjenson ldap-group authorization provider. This example allows a single authorization location to check group membership within multiple ldap hosts:

AuthLDAPGroupAttributeIsDN Directive Description: Use the DN of the client username when checking for group membership Syntax: AuthLDAPGroupAttributeIsDN on|off Default: AuthLDAPGroupAttributeIsDN on Context: directory this directive says to use the distinguished name of the client username when checking for group membership. Otherwise, the username will be used. For example, assume that the client sent the username bjenson ldap-group authorization provider. This example allows a single authorization location to check group membership within multiple ldap hosts:

AuthLDAPGroupAttributeIsDN Directive Description: Use the DN of the client username when checking for group membership Syntax: AuthLDAPGroupAttributeIsDN on|off Default: AuthLDAPGroupAttributeIsDN on Context: directory this directive says to use the distinguished name of the client username when checking for group membership. Otherwise, the username will be used. For example, assume that the client sent the username bjenson ldap-group authorization provider. This example allows a single authorization location to check group membership within multiple ldap hosts:

AuthLDAPGroupAttributeIsDN Directive Description: Use the DN of the client username when checking for group membership Syntax: AuthLDAPGroupAttributeIsDN on|off Default: AuthLDAPGroupAttributeIsDN on Context: directory this directive says to use the distinguished name of the client username when checking for group membership. Otherwise, the username will be used. For example, assume that the client sent the username bjenson ldap-group authorization provider. This example allows a single authorization location to check group membership within multiple ldap hosts:

AuthLDAPGroupAttributeIsDN Directive Description: Use the DN of the client username when checking for group membership Syntax: AuthLDAPGroupAttributeIsDN on|off Default: AuthLDAPGroupAttributeIsDN on Context: directory this directive says to use the distinguished name of the client username when checking for group membership. Otherwise, the username will be used. For example, assume that the client sent the username bjenson ldap-group authorization provider. This example allows a single authorization location to check group membership within multiple ldap hosts:

AuthLDAPGroupAttributeIsDN Directive Description: Use the DN of the client username when checking for group membership Syntax: AuthLDAPGroupAttributeIsDN on|off Default: AuthLDAPGroupAttributeIsDN on Context: directory this directive says to use the distinguished name of the client username when checking for group membership. Otherwise, the username will be used. For example, assume that the client sent the username bjenson ldap-group authorization provider. This example allows a single authorization location to check group membership within multiple ldap hosts:

AuthLDAPGroupAttributeIsDN Directive Description: Use the DN of the client username when checking for group membership Syntax: AuthLDAPGroupAttributeIsDN on|off Default: AuthLDAPGroupAttributeIsDN on Context: directory this directive says to use the distinguished name of the client username when checking for group membership. Otherwise, the username will be used. For example, assume that the client sent the username bjenson ldap-group authorization provider. This example allows a single authorization location to check group membership within multiple ldap hosts: