[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: [ldapext] Nested group (was: groupOfEntries object class proposal)

Andrew Findlay wrote:
> 
> It looks as if the nested groups issue needs tackling.

Which is IMO out of scope.

> Should I expand this I-D to include it?

-1

> 1)	groupOfEntries member attributes should not point to groups
> 	whose members are to be considered part of the group being
> 	described.
> 	
> 	I see no problem with allowing them to point to groups if
> 	expansion/nesting/inclusion is not required.

+1

But the client MAY do expansion of nested groups.

> 2)	There should be a new aux class and attribute to support
> 	client-side group nesting.
> 
> 	Servers can support group nesting in more efficient ways and
> 	some of them already do. Should there be an attempt to
> 	standardise the schema that supports this?

The nested group thing should be defined in a separate draft defining a
separate AUXILIARY object class.

Ciao, Michael.

_______________________________________________
Ldapext mailing list
Ldapext@ietf.org
https://www1.ietf.org/mailman/listinfo/ldapext