Re: Object Class Violation

Mike Jackson said:
> Neil Schneider wrote:
>
>>
>>>Thus you intend to move the responsibility of deciding which object
>>>class to go in an object to the user, when DA is actually in a much
>>>better position to determine the optimum array of needed object
>>>classes.
>>
>>
>> No offense, but this sounds arrogant to me. To my ear this sounds
>> like
>> the software is smarter than the administrator at determining what
>> objectclasses are required. Granted, this is often the case, however
>> the assumption is flawed.
>
> Take a look at the user interface and theme. DA is not intended for an
> LDAP guru. It's target audience is for mostly clueless help-desk
> personnel. Now, we can certainly discuss changing the target audience.
> But we also have to imagine how much the support load will increase if
> we create a complicated tool, and clueless people are trying to use
> it...

I understand that, and that's precisely why I was investigating it. I
make my living as a consultant. After I get the system set up I often
need to leave the day-to-day administrator with a tool that lets them
do simple things themselves. That's precisely why I was looking at
diradmin.

I just want everything. :-)
A simple, easy to use interface and a flexible configuration that
allows me to change the "template" for whatever cusom requirements I
have.

> BTW, for the OL fanboys on the list: This is not any more arrogant
> than
> OL all of the sudden deciding to enforce structural integrity in the
> 2.2-> series, with no method of disabling it. Something which no
> commercial LDAPv3 server does, btw. OL is the only one, in the entire
> world...

I'm not a fan, one way or the other, but OL is the standard
open-source ldap implimentation, like it or not.

> For the record, I am not a big OL fan. And the current DA works
> perfectly with RedHat DS/Netscape DS/Sun One DS/Fedora DS... I just
> made
> a test adding groups and users, against RedHat DS on RHEL4.

How does it work with AD? :-) Fedora is OL, btw. That's precisely what
I was setting up. Probably works perfectly if you don't change from
their default configuration and just start adding users, groups, etc.

-- 
Neil Schneider                              pacneil_at_linuxgeek_dot_net
                                           http://www.paccomp.com
Key fingerprint = 67F0 E493 FCC0 0A8C 769B  8209 32D7 1DB1 8460 C47D
Secrecy, being an instrument of conspiracy, ought never to be the
system of a regular government.
- Jeremy Bentham, jurist and philosopher (1748-1832)