Re: Fwd: I-D ACTION:draft-zeilenga-ldap-relax-00.txt

On Fri, Jul 01, 2011 at 06:13:17PM +0200, Michael Ströder wrote:

> http://tools.ietf.org/html/draft-zeilenga-ldap-relax-03 is expired since end
> of 2008 but some software already uses this feature. The control's OID is
> still not assigned (OpenLDAP's exp. OID arc).

> I'd also suggest that relaxable attribute types are announced with X-RELAX in
> the subschema subentry so that a schema-aware client can determine which
> attributes to make editable in case the control is in effect.

I would certainly support some such mechanism. At present the only way
to find out what is relaxable is to test the operation.

Also, section 3.6 requires that operational attributes may not be
relaxed unless there is a document permitting that action. The draft
itself mentions some common attributes, but omits (for exapmle) all the
attributes described in draft-behera-ldap-password-policy, where this
control is essential for user management if the policy schema is taken
at face value.

As the password policy is still in draft, it would seem appropriate to
update both drafts and submit them together. draft-behera is so widely used
in practice that it really should be at least an Informational RFC.

Andrew
-- 
-----------------------------------------------------------------------
|                 From Andrew Findlay, Skills 1st Ltd                 |
| Consultant in large-scale systems, networks, and directory services |
|     http://www.skills-1st.co.uk/                +44 1628 782565     |
-----------------------------------------------------------------------