Re: Duplicate Entries question

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

I think you do need two flags.

The criticality TRUE flags says the server must return
unavailableCriticalExtension if it is unwilling or unable
to attempt the operation as extended by the control.  If
the server is willing and able to perform the operation
as extended by the control, the criticality flag is
irrelevant.

If there are alternative operation semantics, the control
must provide information to control the semantics... such
as the "partial" flag defined in this proposal.  So:

1) the service is unwilling or unable to attempt the operation as
   extended by the control.
   If critical, return unavailableExtendedOperation.
   Otherwise, process operation as if control was not specified.

2) the service is willing and able to attempt the operation.
   Critical flag is irrelevant.  Process per control semantics:
   a) partial TRUE or
   b) partial FALSE.

Kurt