[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Attribute Name Length Bounds



I've added some more questions below to your list.

Basically, the answer to all of these questions is "it depends".
In particular, it depends on the circumstances of the use of the
protocol.  As LDAP is intended to have a general domain of
applicability, it's best to leave such answers to applicability
statements covering particular circumstances.  That is, we should
leave the answering of these questions to future applicability
statements of restricted domain of applicability (such as use in
PKI, use in white pages, use in ...., use for a "general purpose").

Kurt

At 03:43 PM 6/13/2003, Jim Sermersheim wrote:
>I'm still a little fuzzy on the scope of this discussion.
>
>The ASN.1 for attribute names is an unbounded OCTET STRING. 
>
>This discussion seems to be saying "even though the protocol says the
>size is unlimited (well, limited to a ber length), we want to be more
>explicit and require protocols peers to handle some minimum size".
>
>What else does this discussion apply to?

How many RDNs in a DN must implementations support?
How many AVAs in a RDN must implementations support?
How many options in an attribute description must implementations
  support?
How many descriptions in an attribute description list must
  implementations support?
How many broad of a filter specification must implementations support?
How many deep of a filter specification must implementations support?
How many any substrings in a substrings assertion must implementations
  support?
...