Re: (ITS#4860) Sets' enhancement

[ghenry@OpenLDAP.org]

ando@sys-net.it wrote:
>> Howard Chu a écrit :
> 
>> Unfortunately, it's currently heavily dependant on one of our customer's
>> specific schema extensions and data tree structure. The ACLs in use
>> implement a lot of the logic specific to their environment, therefore I
>> can't send them as is.
>>
>> However, I will see if I can "translate" some of the more complicated
>> ACLs (with sets) to perform on a simple data set for inclusion in the
>> test suite.
>>
>> Could some examples such as these also fit your documentation request
>> for sets and their applications [1]? Assuming this is the case, I will
>> try and provide at least a subset of our test set soon.
>>
>> Cheers,
>> Jon
>>
>> [1] http://www.openldap.org/lists/openldap-software/200709/msg00310.html
> 
> Let me state first that right now I believe sets do not belong to
> slapd(8); they should rather move into a module, under the dynacl
> umbrella.  And, as such, they should be documented separately from
> slapd.access(5), mostly because having them in slapd.access(5) would sort
> of encourage unexperienced people into (ab-)using them.
> 
> Also, I'd like sets' users to document them (especially in terms of useful
> hints, scenarios, case studies and so), as they probably best know what
> one can gain from their use.  Otherwise, a bare description of the syntax,
> although necessary, would hardly be useful to most of the users.
> 
> p.
> 

Agreed. Once decided, we can discuss where they would fit in the Admin 
guide.

-- 
Kind Regards,

Gavin Henry.
OpenLDAP Engineering Team.

E ghenry@OpenLDAP.org

Community developed LDAP software.

http://www.openldap.org/project/