manu@netbsd.org wrote:

The cloak overlay to slapd(8) allows the server to hide specific attributes, unless explicitely requested by the client. This improve performance when a client requests all attributes and get a huge binary attribute that is of no interest for it (think jpegPhoto)

I'd see this overlay more appropriate for contrib/slapd-modules right now, until its functionality is considered of general usefulness, which doesn't seem to be the case right now.

On a related note, if this can be considered of general usefulness, LDAP specs would need to be changed in order to define a finer grain of attribute request; something like:

empty or "*" ; all user, except attrs that need to be explicitly req. "+" ; all operational <all including attrs that need to be explicitly requested> <...>

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando@sys-net.it -----------------------------------