Michael Ströder <michael(a)stroeder.com> wrote:
Why not a simple ACL for a group? Do the applications bind
Of course it does. I said it was ill-designed :-)
> A nicer approach would probably to have a hidden jpegPhoto: it
> be sent to a client requesting all attributes, but a client explicitely
> requesting a set of attribute including jpegPhoto would get it.
I guess you will run into problems with some apps where you do want the
jpegPhoto to be displayed.
Fortunately, the only apps I have that use the jpegPhoto are wise enough
to provide a set of attributes.