Re: Standard objectClass for representing web services

To: openldap-technical@openldap.org

Subject: Re: Standard objectClass for representing web services

From: Hung Luu <hung.n.luu@gmail.com>

Date: Tue, 12 Jan 2010 07:13:00 -0700

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type; bh=W8FckJIBOD1yCsdA0s/AZP35HVrNp/8Gd34uWvml8bg=; b=gCGtlHYBaEN3/yQM4kWCaN2iTbjGPnnNm/RwmMRQqvE4/vTY9XVJyv/VhBIh3imC8e L7G/57IFN6lH3JKOdUO7nJRopqFT3P6Q/FcmY8XF50h7v6254hQanapn+EyLW4vz14H9 nR5hJqzLTd/GhW0FyZ49+mVdEE709ZU/Z6U+8=

Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=b/Ss/varAVNqZoOfDmceNhZWAZbrhdFqq6579cSBsYeF/3dI0Son6MRRYE1vGSnV12 7IFuPUMJPnAeIzfF+8n1bHy95jg/q3k9R7wvQAn0q+nffixnM7CqGQCvvbMQ3fn3pjIY kvE6xBAdHr+OriLqoA16WFZE2NYNQGaKq2iEA=

In-reply-to: <4B4C1E7B.5040603@stroeder.com>

References: <a730b3151001111400pdde82eftc515b364547cf8ec@mail.gmail.com> <4B4C1E7B.5040603@stroeder.com>

2010/1/12 Michael Ströder <michael@stroeder.com>

Hung Luu wrote:
> Does anyone know of a standard objectClass that is appropriate for
> representing web services in the directory?

Personally I prefer to use 'applicationProcess' as a base class for system
processes. You mileage may vary though depending on what attributes you have
to store therein.

> I want to represent web services like users in the directory, and assign
> their DN's to groups for authorization, so I suppose I'm looking for an
> inetOrgPerson equivalent for web services.

The usual group entry object classes ('groupOfNames', 'organizationalRole'
etc.) simply store the member's entry DN. So there is no constraint on the
object class of the member's entry.

Ciao, Michael.

--
Michael Ströder
E-Mail: michael@stroeder.com
http://www.stroeder.com