Re: [ldapext] DBIS - new IETF drafts

[Mark R Bannister <[e-mail]>]

On 09/01/2014 14:50, Michael Ströder wrote:
> Mark R Bannister wrote:
>> I don't personally like the idea
>> of having per-user shadow attributes, however some might see it as a feature
>> and there may be some edge cases where this is exactly what is required.
> AFAICS today nobody is seriously using LDAP with shadow attributes anymore.

Please provide me some empirical evidence that this assertion is true.

>
>> draft-behera-ldap-password-policy-10 is already widely deployed, you say?
>> Then it must go higher up in my reading list.
> Yes, it's the only standard considered widely deployed. You have to know it.

Thanks.  Do we have any idea how widely adopted it is?

>
>> Indeed, I agree, as stated earlier on I would whole-heartedly recommend
>> against having user-specific policy settings.  However, providing the facility
>> as an option for those who want to make minimal changes to their NIS
>> environment is harmless.
> If I replace NIS with LDAP I already have two options:
> 1. Simply use RFC 2307(bis) for a naive transition
> 2. Do a migration to really meaningful LDAP schema
>
> IMHO with 2. I can drop all NIS specific things anyway. You have to decide
> whether DBIS is just an improvement for 1. or a real innvotation for 2.

It's 2.  Show me something I've done that's not "really meaningful" and 
we'll look at improving it.

Best regards,
Mark.