Michael,
Steven Legg wrote:If we are going to allow a variety of object classes to define groups, then we should define a new attribute, e.g., called directMember, to replace the member attribute.
Steven, so the whole thing would boil down to define two new attributes 'directMember' and 'nestedGroup' with a clear specification how to interprete them?
Yes. Any object class that permits the directMember and/or nestedGroup attributes defines a group. These attributes would always have the same effects regardless of the object class. One or more classes that include either or both of the attributes could be defined as a convenience for users that don't want to create their own classes.
Regards, Steven
Ciao, Michael.
_______________________________________________ Ldapext mailing list Ldapext@ietf.org https://www1.ietf.org/mailman/listinfo/ldapext
_______________________________________________ Ldapext mailing list Ldapext@ietf.org https://www1.ietf.org/mailman/listinfo/ldapext