Re: [ldapext] groupOfEntries object class proposal

[Luke Howard <lukeh@padl.com>]

Steven Legg wrote:
> If nested groups are to be allowed, then I would rather see the
> nested groups listed in a separate attribute, e.g., called nestedGroups,
> so that implementations only need to read the entries that really
> are nested groups.
This is what Novell did with eDirectory (they also have an option where 
nested members are presented as values of member).

AD and rfc2307bis, however, simply have groups listed a values of 
member; the client is responsible for dereferencing and transiting if 
required.

-- Luke

--
www.padl.com | www.lukehoward.com


_______________________________________________
Ldapext mailing list
Ldapext@ietf.org
https://www1.ietf.org/mailman/listinfo/ldapext