Metacat

Background: the merge of our ldap trees, the groups information wouldn't be touched.

Before the merge, the uid=ben,o=NCEAS is the member of the group evos; the uid=ben,o=Account is the member of the group dataone.

After the merge, the uid=ben,o=NCEAS is an alias of the uid=ben,ou=Account.

After the merge, i think the group assignment should NOT change. When the user logs in as uid=ben,o=NCEAS, it is still only in the evos group; when the user logs in as uid=ben,ou=Account, it is still only in the dataone group.

Any objection about the above proposal?

Currently, metacat has a different behavior to the above proposal : when the user logs in as uid=ben,o=NCEAS, it is in the dataone group; when the user logs in as uid=ben,ou=Account, it is in the dataone group as well.