In environments where a workaround for Defect ID 664258 is present and has been activated with the BypassValidationForMatchingRuleOID registry entry, it is possible to create a Dynamic Group which contains the LDAP_MATCHING_RULE_IN_CHAIN OID (also known as the LDAP_MATCHING_RULE_TRANSITIVE_EVAL OID), which looks like the following:
1.2.840.113556.1.4.1941
However, these Dynamic Group only update when a Rebuild is performed. They do not update dynamically.
This issue has been addressed in Active Roles 7.5.3 and later versions.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center