Re: DBIS - new IETF drafts
Mark R Bannister <[email protected]> Fri, 10 Jan 2014 14:17:34 +0000
| Newsgroups | gmane.ietf.ldapext |
|---|---|
| Message-ID | <[email protected]> |
On 10/01/2014 00:32, Charlie wrote: > What I have learned from about a decade of quietly following LDAP > across multiple forums and lists is the following: > > 1) Whenever people say "nobody is using this/that" they are invariably wrong. Thanks Charlie, good point. It's like when you watch the TV news and a journalist says "the public think this" or "the public think that". Once something is in the public domain, I don't think anyone can claim to know who is using what, how everyone is using it, nor on what antiquated features anyone may or may not rely, except perhaps the NSA, but let's not go there ;-) > 2) POSIX group semantics are the bane of open-source LDAP. The > functional paradigm that a member is an attribute of a group is > fundamentally broken; group membership is an attribute of the member. > The security concerns frequently raised concerning this are all either > trivially solvable or pragmatically completely bogus. DBIS allows you to represent it from both angles. Best regards, Mark.