RE: draft-ietf-ldapext-locate-01.txt - Discovering LDAP Services with DNS

[Paul Leach <paulle@Exchange.Microsoft.com>]

-----Original Message-----
From: James Benedict [mailto:grunt@nortelnetworks.com]
Sent: Tuesday, January 18, 2000 7:31 AM
To: RL 'Bob' Morgan; Bruce Greenblatt
Cc: ietf-ldapext@netscape.com
Subject: RE: draft-ietf-ldapext-locate-01.txt - Discovering LDAP Services
with DNS


> The problem with this method is that the resolving client must already 
> have knowledge about the directory containing the DN.  Specificly, the 
> resolving client must expect that the DC tree represented by the DN 
> is a valid internet domain.

This isn't strictly true. The client just guesses that the "DC=" components
form a DNS name; if the guess is wrong, it will find out soon enough.

Since, as Bob points out, one is currently hosed if this guess is wrong, the
incentive to make it be correct will be high. I think this is "a good
thing".

Paul