On Tue, 2008-05-27 at 18:22 -0700, Howard Chu wrote:
> Full_Name: Andrew Bartlett
> Version: CVS HEAD
> OS: Fedora 9
> URL: http://www.openldap.org/lists/openldap-technical/200803/msg00101.h=
> Submission from: (NULL) (188.8.131.52)
> For Samba4, I need a few things, detailed in the attached URL.
The above message thread had some unanswered questions. We may need to ha=
each point listed out again.
> This ITS is for internal transactions and validation - the ability to h=
> openldap overlay roll back all the changes so far, because a
on is not
I think this one is understood, OK. Just a matter of getting the time to =
> I need the memberOf and refint modules to ensure that no dangling links=
> exist, even over subtree renames and invalid modifies, and that
> ensures this is always the case.
I think the proper use of memberOf still needs to be addressed. E.g., it'=
generally a bad idea to search for (memberOf=3Dfoo) when you can
enumerate the members inside the "foo" entry. If you give us precise exam=
of the searches and modifications that you'll be using, we may be
narrow the scope of this work.
I'll be passing on any search that a windows client makes, and trying to
return the same result a windows server would return. Bad ideas still
have to be implemented in my world :-(
> This needs to occur even between databases on the server, but I
> it occur outside the known trees.
It's already possible for operations in one database to reference entries=
different database, so that aspect of validation should be fine.
noted before, "validation" is generally bogus to begin
with. In particula=
how do you create entries with circular references? If you disallow
to nonexistent entries, you can't set the references until after
all of t=
entries have been created. This means that you cannot backup a
has these references and then later reload it in a single pass.
An interesting point, but I need to match the windows runtime
Authentication Developer, Samba Team http://samba.org
Samba Developer, Red Hat Inc.
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
-----END PGP SIGNATURE-----