Re: Missing Syntax description in the cn=subschema's LDAPSyntaxes AT

[Kurt Zeilenga <Kurt@OpenLDAP.org>]

On Feb 14, 2012, at 5:03 AM, Emmanuel Lécharny wrote:

> Le 2/14/12 1:19 PM, Michael Ströder a écrit :
>> Emmanuel Lécharny wrote:
>>> In Apache Directory Studio and
>>> the Java LDAP API, it's a bit more annoying, as we try to load the full schema
>>> from the server to locally check that values are correct before sending them
>>> back to the server. We have a mechanism to 'bypass' the missing syntaxes, of
>>> course, but I think that from a completness POV, it would be better if
>>> OpenLDAP add those missing syntaxes...
>> 
>> As a developer of a generic, schema-aware LDAPv3 client you should prepared to deal with incomplete/false subschema. Otherwise your client will joke very often.
> We *are* ready to handle such schemas. M$ AD is most certainly the worst use case around. The question is more about OpenLDAP compliance

Compliance?

RFC 4512:
   Clients SHOULD NOT assume that a published subschema is complete,
   that the server supports all of the schema elements it publishes, or
   that the server does not support an unpublished element.


> : does those missing Syntaxes deserve an ITS or not.

Generally speaking, if it's missing, it's missing for a reason...  generally that reason is the syntax is not implemented, or implemented to the degree needed to one to have a userApplications attribute using that syntax.

This can be viewed as a signal to the client application that listed attributes of that syntax cannot be stored/modified in the subtree of the subschema controls.

-- Kurt

> 
> -- 
> Regards,
> Cordialement,
> Emmanuel Lécharny
> www.iktek.com
>