Association Modeling

As well as representing indirect associations using DNSs, we have added the following extensions to association modeling:

Simple key associations
An association where the membership is expressed through an additional attribute (key). For example, members of a posixGroup are identified by a value of their uid which is an attribute of an account, rather than using account names.
Complex key associations (nisNetgroup)
An association where the membership is expressed through a filter expression evaluated for membership test. For example, account members of a nisNetgroup are expressed through a nisNetgroupTriple value (host, user, and domain). However, matching in the reverse direction from account to group requires using a complex filter expression.