RE: Critical controls

["Ramsay, Ron" <Ron.Ramsay@ca.com>]

But surely there should be exceptions for both unbind and abandon because
you can't indicate an error. If an add, say, has an unrecognised critical
extension, an error will be returned and the client can decide what to do
next. But if an unbind or abandon has an unrecognised critical extension,
the operation is silently ignored.

I think, for clarity, you must either state that no control on an abandon or
unbind request can be marked critical, or say that the criticality will be
ignored.

Ron.

-----Original Message-----
From: Kurt D. Zeilenga [mailto:Kurt@OpenLDAP.org]
Sent: Thursday, 23 November 2000 12:38
To: Ramsay, Ron
Cc: Mark Smith; Jim Sermersheim; ietf-ldapbis@OpenLDAP.org
Subject: RE: Critical controls


At 11:56 AM 11/23/00 +1100, Ramsay, Ron wrote:
>What would be the harm in processing the abandon. Abandon WAS requested.

The harm is in processing an operation which has no defined semantics.

Per my reading of RFC 2251, both abandon/unbind requests with
unsupported and/or inappropriate critical controls should be
ignored.

My suggestion is to make an except for unbind.  If there
is objection to such a change, I withdraw it.

Kurt