[Fedora-directory-devel] Re: How to implement Extended DNs for
Samba4?
Howard Chu
hyc at symas.com
Tue Oct 21 10:49:52 GMT 2008
Pierangelo Masarati wrote:
> Howard Chu wrote:
>
>> I think you misunderstood my proposal. I'm not suggesting we muck with
>> the returned DNs at all; the extra information will only appear in the
>> response control.
>
> So you mean adding a response control value made of something like
>
> controlValue ::= SEQUENCE {
> extended extendedDN
> }
>
> extendedDN ::= SEQUENCE {
> attrval attrVal
> }
>
> attrVal ::= {
> attrspec attrSpec,
> value octetString
> }
>
> where the sequence of attrSpec was specified in the control request. In
> the case at hand, the control request would contain GUID, SID and
> entryDN. Is this what you mean? Then, it would be the client's task to
> use the response to build a string in the format specified by
> 1.2.840.113556.1.4.529.
Yes, that's what I had in mind. The question is whether that's sufficient for
Samba's purposes; the control that I've described is sufficiently general that
it would be useful for a lot of other cases.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
More information about the samba-technical
mailing list