[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: [ldapext] Password Policy OIDs
- To: Jim Sermersheim <jimse@novell.com>
- Subject: Re: [ldapext] Password Policy OIDs
- From: Andrew Sciberras <andrew.sciberras@eB2Bcom.com>
- Date: Thu, 28 Oct 2004 10:07:53 +1000
- Cc: ldapext@ietf.org
- In-reply-to: <s17fe18f.062@sinclair.provo.novell.com>
- Organization: eB2Bcom
- References: <s17fe18f.062@sinclair.provo.novell.com>
- User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.3) Gecko/20040910
Jim Sermersheim wrote:
> Right, but someone may want to define one policy for person objects,
and another policy for widget objects, where persons and widgets fall
under the same hierarchy.
I'm not sure to what extent the SubtreeSpecification attribute is
supported within LDAP directories, but you can certainly achieve your
above statement by using the substreeSpecification att. This is due to
the 'Refinement' choice within the SubtreeSpecification structure that
allows you to filter which entries the policy applies to based on their
object class.
Andrew
_______________________________________________
Ldapext mailing list
Ldapext@ietf.org
https://www1.ietf.org/mailman/listinfo/ldapext