Andrew,
I never use groupOfNames in my own designs for exactly this reason, so I always define a new group class that permits empty groups. While this is an easy thing to do, it appears that many people do not like to define new classes which leads to nasty hacks and trouble stored up for the future. I hope that by defining a standard class with the behaviour that people actually need we can encourage better practices.
Instead of defining a specific object class, perhaps all we need is a *convention* that any entry that contains the member attribute is to be treated as a group.
Regards, Steven
_______________________________________________ Ldapext mailing list Ldapext@ietf.org https://www1.ietf.org/mailman/listinfo/ldapext