Re: appropriateness of combination of controls (new suggestion)

[Michael Ströder <michael@stroeder.com>]

Jim Sermersheim wrote:
> > Do you also handle a message with two critical manageDsaIT
> > controls in the same fashion?
>
> Two manageDsaIT controls will result in a "last one wins" behavior
> (regardless of criticality).

I think a "last one wins" behavior is bad. This leads to poorly written LDAP 
clients not interoperable with different LDAP servers.

Please, be strict in cases where requests are obviously ambigous. LDAP 
clients sending those kind of requests should be treated to get fixed. IMO 
returning protocolError is appropriate in this situation.

Ciao, Michael.