h.b.furuseth@usit.uio.no wrote:

Pierangelo Masarati writes:

...

-ZZ should be deprecated, and -Z should simply and strictly require StartTLS.

Good point. Except then people who are used to new clients will make insecure connections when using old clients. Maybe -Z should be an error instead...

Mine was a generic criticism, not a suggestion for this specific case.

What I'd really really like to do is throw away all the options, rename the programs, and start over. This time with the same option names in ldap tools, slap tools, and slapd itself. Goes with the someday-in-the-future library rewrite, I suppose.

:) p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando@sys-net.it -----------------------------------