Re: postalAddress matching rule

[Michael Ströder <michael@stroeder.com>]

Brett @Google wrote:
> On Sat, Aug 30, 2008 at 7:03 PM, Michael Ströder <michael@stroeder.com> wrote:
> 
>> slapo-collect should intercept the write request and forbid the write access
>> if the attribute type is declared with COLLECTIVE.
> 
> Yep. That sounds reasonable, but i presume it should either return an
> unwilling to perform, or silently ignore it.

I'd prefer to not silently ignore it since returning unwillingToPerform
clearly indicates that a client is misbehaving which needs correction.

> The latter case would be
> better if dumping out a ldap database (as it would be dumped as a
> "real" attribute) and then wanting to import that same data back ?

slapadd is a completely different use-case anyway because operational
attributes are also imported.

Ciao, Michael.