===== populate openldap =====
<code>
cat >initial.ldif <<EOT
dn: dc=fluxcoil,dc=net
objectclass: dcObject
objectclass: organization
o: fluxcoil test labs
dc: fluxcoil

dn: cn=Manager,dc=fluxcoil,dc=net
objectclass: organizationalRole
cn: Manager

dn: ou=groups,dc=fluxcoil,dc=net
objectclass: organizationalUnit
ou: groups

dn: cn=group0,ou=groups,dc=fluxcoil,dc=net
objectClass: posixGroup
cn: group0
gidNumber: 1000

dn: cn=group1,ou=groups,dc=fluxcoil,dc=net
objectClass: posixGroup
cn: group1
gidNumber: 1001

dn: ou=users,dc=fluxcoil,dc=net
objectclass: organizationalUnit
ou: users

dn: cn=user0,ou=users,dc=fluxcoil,dc=net
objectClass: person
objectClass: posixAccount
objectClass: inetOrgPerson
objectClass: organizationalPerson
cn: user0
givenName: Christian
sn: Horn
mail: chorm@domain.net
preferredLanguage: en
telephoneNumber: +123 345
l: muc
departmentNumber: X labs
uid: user0
uidNumber: 1000
gidNumber: 1000
homeDirectory: /home/user0
loginShell: /bin/bash

dn: cn=user1,ou=users,dc=fluxcoil,dc=net
objectClass: person
objectClass: posixAccount
objectClass: inetOrgPerson
objectClass: organizationalPerson
cn: user1
givenName: Christian
sn: Horn
mail: chorm@domain.net
preferredLanguage: en
telephoneNumber: +123 345
l: muc
departmentNumber: X labs
uid: user1
uidNumber: 1001
gidNumber: 1001
homeDirectory: /home/user1
loginShell: /bin/bash
EOT

# openldap
ldapadd -x -D cn=manager,dc=fluxcoil,dc=net -w redhat -f initial.ldif
# rhds
ldapadd -x -D 'cn=Directory Manager' -w redhat -f initial.ldif

# set passwords for the 2 users
ldappasswd -x -D cn=manager,dc=fluxcoil,dc=net -w redhat -s redhat cn=user0,ou=users,dc=fluxcoil,dc=net
ldappasswd -x -D cn=manager,dc=fluxcoil,dc=net -w redhat -s redhat cn=user1,ou=users,dc=fluxcoil,dc=net
</code>

===== nested groups =====
<code>
cat >nestgroups.ldif<<EOT
dn: cn=contgroup0,ou=groups,dc=fluxcoil,dc=net
cn: contgroup0
objectClass: posixGroup
objectClass: groupofuniquenames
gidNumber: 1005
uniqueMember: cn=user0,ou=users,dc=fluxcoil,dc=net

dn: cn=contgroup1,ou=groups,dc=fluxcoil,dc=net
cn: contgroup1
objectClass: posixGroup
objectClass: groupofuniquenames
gidNumber: 1006
uniqueMember: cn=user1,ou=users,dc=fluxcoil,dc=net

dn: cn=subgroup0,ou=groups,dc=fluxcoil,dc=net
cn: subgroup0
objectClass: posixGroup
objectClass: groupofuniquenames
gidNumber: 1002
uniqueMember: cn=contgroup0,ou=groups,dc=fluxcoil,dc=net

dn: cn=subgroup1,ou=groups,dc=fluxcoil,dc=net
cn: subgroup1
objectClass: posixGroup
objectClass: groupofuniquenames
gidNumber: 1003
uniqueMember: cn=contgroup1,ou=groups,dc=fluxcoil,dc=net

dn: cn=subgroup2,ou=groups,dc=fluxcoil,dc=net
cn: subgroup2
objectClass: posixGroup
objectClass: groupofuniquenames
gidNumber: 1004
uniqueMember: cn=contgroup0,ou=groups,dc=fluxcoil,dc=net
uniqueMember: cn=contgroup1,ou=groups,dc=fluxcoil,dc=net
EOT
</code>