Re: DBIS - new IETF drafts

Mark R Bannister wrote:
> I don't personally like the idea
> of having per-user shadow attributes, however some might see it as a feature
> and there may be some edge cases where this is exactly what is required.

AFAICS today nobody is seriously using LDAP with shadow attributes anymore.

> draft-behera-ldap-password-policy-10 is already widely deployed, you say? 
> Then it must go higher up in my reading list.

Yes, it's the only standard considered widely deployed. You have to know it.

> Indeed, I agree, as stated earlier on I would whole-heartedly recommend
> against having user-specific policy settings.  However, providing the facility
> as an option for those who want to make minimal changes to their NIS
> environment is harmless.

If I replace NIS with LDAP I already have two options:
1. Simply use RFC 2307(bis) for a naive transition
2. Do a migration to really meaningful LDAP schema

IMHO with 2. I can drop all NIS specific things anyway. You have to decide
whether DBIS is just an improvement for 1. or a real innvotation for 2.

Ciao, Michael.

_______________________________________________
Ldapext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ldapext