I am am using dynamic groups for handling automatic role assignments.
Everything works fine when I create a group and assign any role to it.
But when the group have no role assigned, the "member" attribute is
populated correctly, but "nrfDynamicMember" is not, and the user does
not have any back referente to the group (nrfDynamicGroupMembership nor
Checking the dynamic groups synchronization in the Role and Resource
driver's log file, groups without assigned roles apparently are not even
There is a simple solution: assigning a dummy role to each group, but I
would like to know if this is a expected behavior or I did something
wrong anywhere.

jluizberg's Profile: https://forums.netiq.com/member.php?userid=2003
View this thread: https://forums.netiq.com/showthread.php?t=48858