To add an owner to the group, click the Add icon next to the Owner box. Choose Apply to apply your changes or choose Revert to abandon your changes.

Managing Dynamic and Static Groups 14-13 Modifying a Dynamic Group Entry by Using Oracle Directory Services Manager Remember that you must choose either the labeledURI or the CONNECT BY method for dynamically computing membership in the group. You cannot use both methods. If you are using the labeledURI method, you must set the labeledURI attribute, but not the orclConnectByAttribute and orclConnectByStartingValue attributes. If you are using the CONNECT BY method, you must set the orclConnectByAttribute and orclConnectByStartingValue attributes, but not the labeledURI attribute. To modify an attribute for a dynamic group entry, proceed as for a static group entry, as described in Modifying a Static Group Entry by Using Oracle Directory Services Manager on page 14-10. You can add static members to a dynamic group, but you are not required to do so. Managing Group Entries by Using the Command Line You can manage static and dynamic groups from the command line by using LDAP tools. This section contains the following topics: ■ Creating a Static Group Entry by Using ldapadd ■ Modifying a Static Group by Using ldapmodify ■ Creating a Dynamic Group Entry by Using ldapadd ■ Modifying a Dynamic Group by Using ldapmodify Creating a Static Group Entry by Using ldapadd The syntax for the LDIF file is: dn: DN_of_group_entry objectclass: top objectclass: groupOfNames | groupOfUniqueNames member: DN of member 1 member: DN of member 2 . . . member: DN of member N The following command adds the group and members in this LDIF file to the directory: ldapadd -p port_number -h host -D cn=orcladmin -q -f file_name.ldif See Also: ■ Dynamic Groups on page 14-2 ■ Security Groups on page 29-4 ■ Globalization Support on page 3-15 Notes: ■ When you create a group, specifying members is optional and is shown here for the sake of completeness. ■ It is uncommon to have dynamic groups with static membership. 14-14 Oracle Fusion Middleware Administrators Guide for Oracle Internet Directory Example: Creating a Static Group Entry by Using ldapadd The following example shows an LDIF file named myStaticGroup.ldif for the entry for a group named MyStaticGroup: dn: cn=myStaticGroup,c=us objectclass: top objectclass: groupOfNames member: cn=John Doe member: cn=Anne Smith The following command adds the group and members in this LDIF file to the directory: ldapadd -p 3060 -h myhost -D cn=orcladmin -q -f myStaticGroup.ldif Modifying a Static Group by Using ldapmodify To add a member to a group, the syntax of the LDIF file is: dn: DN_of_group_entry changetype: modify add: member member: DN of member entry To delete a member from a group, the syntax of the LDIF file is: dn: DN of group entry changetype: modify delete:member member:DN of member entry Issue this command to modify the file: ldapmodify -D cn=orcladmin -q -p 3060 -v -f file_name.ldif where -v specifies verbose mode. Example: Modifying a Static Group by Using ldapmodify The following example adds John Doe to a group named MyStaticGroup. As in the previous example, the data for this user entry is in the myStaticGroup.ldif file. This file contains the following: dn: cn=myStaticGroup,c=us changetype: modify add:member member: cn=John Doe Issue this command to modify the file: ldapmodify -D cn=orcladmin -q -p 3060 -v -f myStaticGroup.ldif where -v specifies verbose mode. Note: When you add or modify an entry, the Oracle directory server does not verify the existence of the entry. However, if the attribute value must contain a DN, then the directory server verifies that the DN is specified.