RFC2251 does not disallow the presence of Controls in Response LDAPMessages (sent by a server to the client) - see paragraph 4.1.1. Was the intent of the RFC authors to allow controls both ways (c<->s)?
However, the paragraph 4.1.12 describes the behavior of the server (but not the client) when it receives such structures. It implicitly assumes that controls are (may be) sent only by clients to servers.
What is a client supposed to do with the controls received from a server?
Is it a protocol violation if a server sends controls in a response LDAPMessage?
Thanks,
Mircea Pana