[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: [ldapext] Nested group

To: "Liben, Michael \(GTI\)" <michael_liben@ml.com>
Subject: Re: [ldapext] Nested group
From: Michael Ströder <michael@stroeder.com>
Date: Thu, 20 Sep 2007 10:34:11 +0200
Cc: ldapext@ietf.org
In-reply-to: <DD9F4CC53AE89944A5C825781D5E3090044982@MLNYC727MB.amrs.win.ml.com>
References: <46EF07BD.1010801@padl.com><20070918110511.GF23300@tile.skills-1st.co.uk><46F060CD.20008@eb2bcom.com> <46F063BE.5020900@padl.com><20070917143336.GA7266@tile.skills-1st.co.uk><46EF07BD.1010801@padl.com><20070918110511.GF23300@tile.skills-1st.co.uk><46F060CD.20008@eb2bcom.com><20070919104644.GE12296@tile.skills-1st.co.uk><1190210820.31971.105.camel@localhost.localdomain><20070919152141.GH12296@tile.skills-1st.co.uk> <1190220132.31971.147.camel@localhost.localdomain> <DD9F4CC53AE89944A5C825781D5E3090044982@MLNYC727MB.amrs.win.ml.com>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.6) Gecko/20070802 SeaMonkey/1.1.4

Michael,

please keep citations for reference.

Liben, Michael (GTI) wrote:
>> [..discussion about separate attribute for nested groups..]
> This anticipates a reliable mechanism that ensures direct members are
> not added to the nestedGroups attribute and that nested groups are
> not inadvertently added to the member attribute.

Good point. But note that this is a pertinent problem with many
attributes where additional constraints are defined in a specification
but cannot be enforced by most server implementations.

> How would the server
> respond if an object is included in both attributes?

If the server can detect this I'd think 'constraintViolation' would be
appropriate.

Ciao, Michael.

_______________________________________________
Ldapext mailing list
Ldapext@ietf.org
https://www1.ietf.org/mailman/listinfo/ldapext

References:
- Re: [ldapext] groupOfEntries object class proposal
  - From: Luke Howard <lukeh@padl.com>
- Re: [ldapext] groupOfEntries object class proposal
  - From: Andrew Findlay <andrew.findlay@skills-1st.co.uk>
- Re: [ldapext] groupOfEntries object class proposal
  - From: Steven Legg <steven.legg@eb2bcom.com>
- Re: [ldapext] groupOfEntries object class proposal
  - From: Luke Howard <lukeh@padl.com>
- [ldapext] groupOfEntries object class proposal
  - From: Andrew Findlay <andrew.findlay@skills-1st.co.uk>
- [ldapext] Nested group (was: groupOfEntries object class proposal)
  - From: Andrew Findlay <andrew.findlay@skills-1st.co.uk>
- Re: [ldapext] Nested group (was: groupOfEntries object class proposal)
  - From: simo <idra@samba.org>
- Re: [ldapext] Nested group (was: groupOfEntries object class proposal)
  - From: Andrew Findlay <andrew.findlay@skills-1st.co.uk>
- Re: [ldapext] Nested group (was: groupOfEntries object class proposal)
  - From: simo <idra@samba.org>
- RE: [ldapext] Nested group (was: groupOfEntries object class proposal)
  - From: "Liben, Michael \(GTI\)" <michael_liben@ml.com>

Prev by Date: Re: [ldapext] Nested group (was: groupOfEntries object class proposal)
Next by Date: Re: [ldapext] Nested group
Index(es):
- Chronological
- Thread