[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
RE: Implementation of 4.5.2 and 4.5.3 of RFC 2251
>The attribute I describe "non-specific subordinate reference" is
the
> > same that has been
> > already described on draft-ietf-ldapext-referral-00.txt section 5.3.
> > Thank you for the point.
> >
> > But, On this draft I don't understand the DN:
> >
> > dn: ref=ldap://hostB/o=abc,c=us
> >
> > Is this a valid DN? Formally speaking, it is valid but I think it
> has
> > gone out of all schemata.
> > What parts of the DIT are affected by this entry?
> > The draft says that "is similar to non-specific sub-ordinate
> reference
> > concept found in X.500"
> > so then it affects to all the leafes entries...
> > How does this entry affects to the search operations?
>
> These entries are similar to the way referrals are handled in OpenLDAP
> now. In the current version, referrals have to be leaf entries and the
> ref attribute has to be used in the DN of the entry. Note that section
> 5.1 removes both of those requirements.
>
> Formally speaking, the DNs have problems since the comma would have to
> be escaped to make the ",c=us" part of the URL rather than another RDN.
>
> I don't really understand this section of the draft either, since I don't
> see what the utility of the additional attributes is with respect to
> searching. Using the example, both a one-level and subtree search of
> the root DSE for the server, regardless of the search filter, should
> return continuation references for all of the referrals. A base search
> wouldn't find them at all. The only time the attributes would be
> meaningful is if you were looking for referrals, i.e., included the
> manageDsaIT control, which would "turn off" the referral so that it could
> be returned as a search result.
>
I understand the ref attribute in the way to make references to other
services in general i.e. a file, a web page, or even to provided an "alias"
to
another entry where I can find more information about one item, for example,
if I work in two companies or two departments, It can be interesting to
put a "link" from one entry to the other. But, I think the parameter is not
useful for browsing through LDAP servers as it is the intention of this
Draft.
Until now, I didn't know the way openLDAP store the referrals.
Does Somebody know
the reason that leads the developers to do it on that way?, What are
the
advantage?
On a first view I think it gets more difficult the access to X.500.
> Since this draft has technically expired and does have a gap or two,
> further discussion should go to the ldap-ext list. Not because of the
> topic, but because it addresses the specifics of the draft and that's
> the list that counts in that case.
>
OK. I have posted some questions about this Draft to the IETF list.
Regards,
----
Juan Pablo Cabrera Borges.
KPN Research.