Re: LDAP ACLs

[prasanta@netscape.com (Prasanta Behera)]

Paul Leach wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
>
>
>  2. However, there might be several different kinds of ACL formats,
> for different servers. Each format would have an OID associated with
> it.

This will not be a god idea.  If we have n formats,

1) the a server  has to  support all the formats which will be expensive
to manage.
2) The admin has to understand all the formats. If  one wants to one ACL,
the the
    admin hads to modify all of them.
3) Make sure the replicating serevrs have to undestand it.
3)  What about replication issues ?

I thought we agreed @ LA to move forward with one standard format.

/prasanta