Re: [ldapext] LDAP Groups topic split-out

[Charlie <[e-mail]>]

On Fri, Dec 4, 2015 at 5:02 AM, Michael Ströder <[e-mail]> wrote:
>
> http://typinganimal.net/rants/textify.php?f=draft-brooks-ldap-sets-00.txt
>
> Although you will likely claim that your I-D also describes the problem in
> general you're already endorsing a particular solution. :-/

I have indeed endorsed a particular solution, but I support any effort
that will address any of the structural problems exposed by real-life
daily directory administration.

In section 3 of my I-D I enumerated the requirements for a generalized
solution to all grouping problems in real-world directories.  Any
solution that satisfies those requirements will make the world a
better place.  It doesn't have to be MY solution.

But pragmatically, everyone is going to end up using memberOf
attributes eventually.   This should be clear by now; it's certainly
clear to our friends in Redmond and Raleigh.  We can fight this and
make it painful for everyone involved - or we can accept it as
architecturally correct, and create useful LDAP standards for
programmers working towards system interoperability.

--Charlie