Re: [ldapext] Dynamic group draft

[Howard Chu <hyc@highlandsun.com>]

Jaimon Jose wrote:
> Pierangelo Masarati wrote:
>   
> > AUXILIARY classes dynamicGroupAux and dynamicGroupOfUniqueNamesAux
> > cannot respectively inherit from groupOfNames and groupOfUniqueNames
> > since the latter are STRUCTURAL.
> >   
> >     
>
> The idea of inheriting from groupOfnames and groupOfUniqueNames is to
> have the group properties in addition to dynamicGroup properties. 
> Certain implementations seem to allow that. 

Those implementations are clearly broken then. The data model is quite 
explicit; this is stated in RFC4512 section 2.4.3:
   Auxiliary object classes cannot subclass structural object classes.

>   I'm personally not in
> favor of copying the group properties to the auxiliary class.  Lack of
> these properties will introduce a constraint that,  only group objects
> can be marked as dynamic group.

You can take the approach that IBM did...

http://publib.boulder.ibm.com/infocenter/iseries/v5r3/index.jsp?topic=/rzahy/rzahygpattr.htm

Clearly you must not write a spec that doesn't conform to RFC4512.

--
 -- Howard Chu
 Chief Architect, Symas Corp.  http://www.symas.com
 Director, Highland Sun        http://highlandsun.com/hyc
 Chief Architect, OpenLDAP     http://www.openldap.org/project/


_______________________________________________
Ldapext mailing list
Ldapext@ietf.org
https://www1.ietf.org/mailman/listinfo/ldapext