Brett @Google wrote:
On Sat, Aug 30, 2008 at 7:03 PM, Michael Ströder michael@stroeder.com wrote:
slapo-collect should intercept the write request and forbid the write access if the attribute type is declared with COLLECTIVE.
Yep. That sounds reasonable, but i presume it should either return an unwilling to perform, or silently ignore it.
I'd prefer to not silently ignore it since returning unwillingToPerform clearly indicates that a client is misbehaving which needs correction.
The latter case would be better if dumping out a ldap database (as it would be dumped as a "real" attribute) and then wanting to import that same data back ?
slapadd is a completely different use-case anyway because operational attributes are also imported.
Ciao, Michael.