Re: DBIS - new IETF drafts

Mark R Bannister <[email protected]> Fri, 10 Jan 2014 14:17:34 +0000
Newsgroups gmane.ietf.ldapext
Message-ID <[email protected]>
On 10/01/2014 00:32, Charlie wrote:
> What I have learned from about a decade of quietly following LDAP
> across multiple forums and lists is the following:
>
> 1) Whenever people say "nobody is using this/that" they are invariably wrong.

Thanks Charlie, good point.  It's like when you watch the TV news and a 
journalist says "the public think this" or "the public think that".  
Once something is in the public domain, I don't think anyone can claim 
to know who is using what, how everyone is using it, nor on what 
antiquated features anyone may or may not rely, except perhaps the NSA, 
but let's not go there ;-)

> 2) POSIX group semantics are the bane of open-source LDAP.  The
> functional paradigm that a member is an attribute of a group is
> fundamentally broken; group membership is an attribute of the member.
> The security concerns frequently raised concerning this are all either
> trivially solvable or pragmatically completely bogus.

DBIS allows you to represent it from both angles.

Best regards,
Mark.