[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#6055) Samba4 need 'name' implementation like AD (RDN-Name)



----- abartlet@samba.org wrote:

> Full_Name: Andrew Bartlett
> Version: CVS HEAD
> OS: Fedora 10
> URL: http://msdn.microsoft.com/en-us/library/cc223167(PROT.13).aspx
> Submission from: (NULL) (59.167.251.137)
> 
> 
> Active Directory always presents an attribute 'name' that is always
> equal to the
> relative distinguished name.  AD allows only one RDN, but I don't mind
> if this
> can be multi-valued for the multi-RDN case.  It is equal to the value
> of the RDN
> as presented in the RDN.
> 
> This is not simply the subtype 'CN -> name', but a new attribute
> unrelated to
> the existing definition of 'name'.
> 
> I don't care what name is assigned to 'name', as I can easily remap
> attributes.
> 
> It would be great if this could be constructed such that it may be
> declared to
> be unique for a particular one-level search (also an AD requirement,
> but not one
> Samba4 requires or enforces at this time).  

The only problem I see in defining such an attribute is that its syntax should allow the value of any syntax, so it should probably be octetString or something like that.  From the implementation point of view, what operations should it be used for?  If you only need it to be returned with searches, and to be compared, then the implementation would be trivial (it could be dynamically generated, much like entryDN, as far as I can tell).  If you need to search for it, namely use it in a filter, then it might be better to store it in the database.  This would require to handle add and modrdn, forbid modify, and nothing else.

p.


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it
-----------------------------------