Re: Async operations and automatic referral following in java-api-11

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 12:25 PM 9/7/00 -0600, Steven Merrill wrote:
>IMO there is no technical reason that automatic referral
>following mechanisms cannot be used across the board,
>for both synchronous and asynchronous operations.

There are security issues which taken into consideration.
Many of the issues were discussed previously on this list
(primarily in regard to the C API, but they apply here as
well).  IMO, chasing of referrals should not be done without
some form of user authorization as chasing exposes information
(even in the anonymous case) about the user.

I also believe the low-level API (async) should have a direct
relationship to protocol data units.  One API call to send a
PDU, one API call to receive a PDU.  Higher level functionality
should be layered, not embedded.

Kurt