Re: referrals to foreign directory tree?

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 05:48 PM 3/14/01 +0000, Konstantin Chuguev wrote:
>"Kurt D. Zeilenga" wrote:
>
>> At 02:22 PM 3/7/01 +0000, Konstantin Chuguev wrote:
>> >1) Add new naming contexts (suffixes) to each of your servers: suffix
>> >"c=US" to the first one, suffix "c=JP" to the second one;
>> >2) Create new entries of the referral objectClass in each server: again,
>> >in the first:
>> >dn: c=US
>> >objectclass: top
>> >objectclass: country
>> >objectclass: referral
>> >c: US
>> >ref: ldap://<server_for_US:port>/c=US
>>
>> This is an invalid entry.  An entry cannot be both a country
>> and a referral.  s/country/extensibleObject/
>>
>
>Sorry, I could not found anything in standards pointing this is invalid.
>Could you provide me with some references please.

IIRC, it's in X.501.

>Also, is that restriction only for the referral objectclass, or generic?

generic.  You list two structural object classes (in this case,
referral and country) where X is not in the super class chain of Y
and Y is not in the super class change of X, hence the structure
of the entry cannot be determined.  

As I noted previously, OpenLDAP 2.0 doesn't detect nor report
this as a violation, a future version will.