[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#4730) Overlay that generates operational attributes to support GUI interaction



> I've created a simple Makefile derived from the one for slapo-smbk5pwd for
> this I'd like to contribute if appropriate. Please review. I grant *all*
> rights to the OpenLDAP project.
>
> Now for the concrete testing:
>
> In principle it works. That's great!
>
> There's a special corner-case:
> If the user bound (e.g. anonymous in my test configuration) has no write
> access to any attribute an empty attribute value list is returned for
> 'allowedAttributesEffective'.

You mean an instance of the allowedAttributesEffective with the empty
value?  I'm not seeing anything like that.

> Indeed this is helpful since my web2ldap can
> then distinguish between this attribute being not available at all or no
> attributes are allowed to be written. But I'm not sure whether that
> complies
> to the LDAP data model. What do you think?

In any case, I'd consider it an error, which deserves to be fixed.

p.