Re: appropriateness of combination of controls (new suggestion)

[Michael Ströder <michael@stroeder.com>]

Kurt D. Zeilenga wrote:>
> Well, I checked our code and, to my surpise, it wasn't as
> I previously described.  OpenLDAP slapd(8) response of say:
>         search+ManageDsaIT+manageDsaIT
>         search+subentries+subentries
>
> would be to return protocolError.  Given this, I retract my
> suggested text.
>
> If we're going to recommend returning an error here, I think
> we should specifically recommend return of protocolError over
> a code like unwillingToPerform.
>
> unwillingToPerform implies that the operation can be performed,
> but that this particular server is unwilling or unable to perform
> the operation (at this time).  protocolError more accurately
> reflects that the server cannot make sense of the request.

+1

protocolError would signal the LDAP client developer that there's really 
something going wrong in the client implementation which must be fixed to work.

Ciao, Michael.