[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: A tricky matched values problem

At 01:41 PM 10/5/99 +0200, Harald Tveit Alvestrand wrote:
>At 09:34 04.10.99 -0400, Salter, Thomas A wrote:
>>I'm not sure the 'Molesworth Principle" should apply here.  In this case,
>>the requestor has explicitly set "matchedValuesOnly" in an attempt to limit
>>the size of the response.  If he doesn't get enough information, he can
>>always remove the matchedValuesOnly control and try again.
>
>I'm not sure who Molesworth is, but if the purpose of the control is to 
>limit the size of the response, it might be better to have a control that 
>tells the server something about what the client wants back rather than 
>something about how he wants the search criteria treated.
[snip]

I think that I get what Harald is saying.  The Matched Values Only Control
(MVO) is trying to force the Search filter into performing two tasks
simultaneously:

1. Decide which entries to retrieve
2. Decide which attribute values in entries that match to retrieve

It isn't clear to me that this will work.  The Search filter can only be
used for one of these tasks at a time. I'll modify one of Harald's examples:

- I want to search for a user's email address, and I want the certificate
that contains was issued by the Verisign Class 2 CA (assuming that the
fancy Certificate matching rules are supported).

As I understand it, the fact that entries can hold zillions of certificates
in the userCertificate attribute is one of the reasons for the MVO's
existence.  For this to actually give the user what he want's the user must
already know that the entry contains a Verisign Class 2 certificate,
otherwise the search wouldn't have matched.  Thus, if you already know the
answer to the filter item for all matching entries, don't include it in the
search.  You'd just be negatively impacting the performance of the search
with unnecessary computation.  On the other hand, if you don't know the
answer then you risk not giving the user back anything, which is not too
useful.  Instead the MVO should include its own simpler filter to get the
appropriate values from the matching entries...

Bruce


>                        Harald
>--
>Harald Tveit Alvestrand, Maxware, Norway
>Harald.Alvestrand@maxware.no
>
>
>
==============================================
Bruce Greenblatt, Ph. D.
Directory Tools and Application Services, Inc.
http://www.directory-applications.com