X.500 and LDAP alignment

[Erik Andersen <era.als@get2net.dk>]

Hi Bob,

The new work item on LDAP is very loosely defined (to achieve maximum alignment 
with LDAP) not to constrain the work. As it is an X.500 work item, we can only 
specify alignment in one direction. We see several ideas in the LDAP work that 
could be useful to incorporate. However, we see alignment in both directions as 
very important. As the LDAP protocol is the most used X.500 access protocol, 
extension to LDAP to support most of the features below is very desirable.

Within X.500, we have or are in the progress of adding a large number of new 
features. The following are completed and stable items:

a)  Facilities to control and constrain the service given to different user 
groups using a concept called search-rules.

b)  Families of entries, for which David Chadwick has issue an Internet draft. 
We would be very interested in seeing that progressed.

c)  Hierarchical groups, which allow hierarchies to be established independent 
of the DIT hierarchy.

d)  Mapping-based matching with emphasis on geographical (zonal) matching which 
allows mapping between the real world as seen by users and the model of the 
world as it is reflected in a directory.

e)  Matching rule substitution allowing a great flexibility in matching to 
ensure more successful searches

f)  Much user related diagnostic information to be returned to users to guide 
in making a new, more successful search

Of new items, the most important is probably "Related Entries in the 
Directory". This is a way to access in one request information from different 
directories having different naming spaces (or disjoint naming spaces). This is 
a very significant work item that in many respects will align X.500 to the real 
world instead of trying the reverse. It will also bring X.500 closer to the 
LDAP philosophy. Personally, I see it as a tool to provide interworking between 
LDAP and X.500 servers (and possibly other types of directories).

Hope that helps.

Erik Andersen
Mobile: +45 20 97 14 90
E-mail;  era.als@get2net.dk
Internet: http://www.cenorm.be/isss/Workshop/DIR/Default.htm


-----Original Message-----
From:	RL 'Bob' Morgan [SMTP:rlmorgan@washington.edu]
Sent:	30. august 2000 16:57
To:	Erik Andersen
Cc:	David Chadwick; osidirectory@az05.bull.com; IETF ldapext WG; IETF ldapbis 
WG
Subject:	RE: Matching Rules for Constructed Syntaxes


On Wed, 30 Aug 2000, Erik Andersen wrote:

> I do not see why we should not include it in our first draft for the LDAP
> alignment works. David, hope to see you in Orlando. Your presence would be
> very useful.

Can someone from the X.500 community describe and/or offer a pointer to
the "LDAP alignment" activity?  I think everyone involved with LDAP is
pleased that this is happening, but especially in the context of the
ldapbis work, one of whose items will be (I think) clarifying LDAP's
dependencies on X.500, it does raise questions of who is aligning with
whom.

Thanks,

 - RL "Bob"