Re: [ldapext] [Fwd: LDAP C API gripes]

[Michael B Allen <mba2000@ioplex.com>]

On Wed, 21 Feb 2007 14:07:08 -0500
simo <idra@samba.org> wrote:

> On Wed, 2007-02-21 at 19:48 +0100, Pierangelo Masarati wrote:
> > Michael B Allen wrote:
> > 
> > 
> > > As for retrieving the schema from the server at runtime, we did not do
> > > that. Not just for performance reasons but more so because there is no
> > > standard way to retrieve that information, it is awkward to do so or
> > > you cannot do it at all (e.g. RootDSE attributes in AD have no schema
> > > definitions).
> > 
> > 
> > There __is__ a standard way, it's described in RFC4512 secton 4.4; the
> > fact that some implementors don't comply with it, or do not populate
> > values as indicated in the standard is a totally different business.
> 
> Last I checked AD supported subschemaSubentry, I don't think that
> changed overnight. I can't say the same of the std openLdap installation
> you find on many distributions out there :)

Actually I'm wrong. Last time I looked at this I didn't think ADs
subSchemaSubEntry had all of the necessary information. But looking at
it again it apparently does. I think I was orignally concerned about not
being able to filter by name. But an installer could download and store
the defs for the library to load locally at runtime. I think that would
perform pretty well especially if they were hash indexed by name.

> I am not sure to what attributes Michael refer, but I guess that even if
> they are not defined they can be easily hard coded eventually.

The RootDSE attributes are not listed in subSchemaSubEntry or
CN=Schema,CN=Configuration,DC=X under AD. Not sure why. I think it has
something to do with bootstrapping the DIT.

Mike

-- 
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/

_______________________________________________
Ldapext mailing list
Ldapext@ietf.org
https://www1.ietf.org/mailman/listinfo/ldapext