Re: DBIS - new IETF drafts

Simo wrote:
> On Thu, 2014-01-09 at 19:08 +0100, Michael Ströder wrote:
>> Simo wrote:
>>> The full schema definitions can be found here:
>>> https://git.fedorahosted.org/cgit/freeipa.git/tree/install/share/60basev2.ldif
>>
>> Looked at the schema:
>>
>> I'm a bit confused by some object classes directly referencing MAY memberOf.
>> 'memberOf' is normally an operational attribute also in 389 DS isn't it?
> 
> It is a generated by the memberof plugin, it's semantics are different
> from other solutions (like AD), all descendants are resolved at modify
> time.

Really different semantics?

AFAIK memberOf should be a simple back-link from the member's entry to the
group entry. When the attribute value is actually created (on modify or on
read) is not relevant for memberOf semantics. Or did I get you wrong?

>> Also I don't understand the rationale for object class nestedGroup SUP
>> groupOfNames with memberOf.
> 
> Not sure where's the confusion.

I'm confused by seeing an operational attribute like 'memberOf' being defined
in user schema.

Ciao, Michael.

_______________________________________________
Ldapext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ldapext