Re: (ITS#4860) Sets' enhancement

[ando@sys-net.it]

> Howard Chu a écrit :

> Unfortunately, it's currently heavily dependant on one of our customer's
> specific schema extensions and data tree structure. The ACLs in use
> implement a lot of the logic specific to their environment, therefore I
> can't send them as is.
>
> However, I will see if I can "translate" some of the more complicated
> ACLs (with sets) to perform on a simple data set for inclusion in the
> test suite.
>
> Could some examples such as these also fit your documentation request
> for sets and their applications [1]? Assuming this is the case, I will
> try and provide at least a subset of our test set soon.
>
> Cheers,
> Jon
>
> [1] http://www.openldap.org/lists/openldap-software/200709/msg00310.html

Let me state first that right now I believe sets do not belong to
slapd(8); they should rather move into a module, under the dynacl
umbrella.  And, as such, they should be documented separately from
slapd.access(5), mostly because having them in slapd.access(5) would sort
of encourage unexperienced people into (ab-)using them.

Also, I'd like sets' users to document them (especially in terms of useful
hints, scenarios, case studies and so), as they probably best know what
one can gain from their use.  Otherwise, a bare description of the syntax,
although necessary, would hardly be useful to most of the users.

p.



Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
---------------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Email:   pierangelo.masarati@sys-net.it
---------------------------------------