In simplest terms, the 'controlError' result code means that the control may have caused the operation to fail.
Individual control definitions would have some flexibility in defining what the 'controlError' meant in the context of their defined control.
Some controls will not have embedded result codes and the use of the 'controlError' result code will be caused by a very specific scenario (as defined in the control draft). Other controls could have embedded results and the 'controlError' would signify that the result codes embedded in the control should be parsed for additional information.
I will review the draft to see where I can clarify and resubmit a new draft in two weeks (I want to leave some time for additional feedback/comments).
thanks,
Michael
-----Original Message-----
From: Kurt D. Zeilenga [mailto:Kurt@OpenLDAP.org]
Sent: Thursday, July 20, 2000 11:56 AM
To: Michael Armijo
Cc: ietf-ldapbis@OpenLDAP.org
Subject: Re: LDAP Control Result Codes I-D
Michael,
Also in regard to:
The controlError result code should be returned when an operation
has succeeded but an attached control may have failed.
Do you mean succeeded as in "success" or succeeded as in returned
a result not indicative of an error (ie: success, compareTrue,
compareFalse, referral, saslBindInProgress) ?
Kurt