Re: [ldapext] Schema for posixGroup successor (RFC 2307 bis)

[Michael Ströder <[e-mail]>]

Andrew Findlay wrote:
> On Wed, Feb 11, 2015 at 10:58:31AM +0100, Michael Ströder wrote:
> 
>> To preserve backwards compability I'd like to propose the following:
>>
>> ( <OID TBD>
>>   NAME 'posixGroup2'
>>   DESC '<TBD>'
>>   SUP ( groupOfEntries $ posixGroup )
           ^^^^^^^^^^^^^^
>>   STRUCTURAL )
> 
> That's a very cunning plan, but I am not sure that it will work...
> [..]
> Thus I think that your new class would have *more* mandatory
> attributes than either of its superiors:
> 
> 	MUST ( member $ cn $ gidNumber )
> 
> Not quite the point as we really want member to be optional.

Hey Andrew, *you* should really remember why you wrote
draft-findlay-ldap-groupofentries ! ;-]

Ok, you've overlooked that I wrote 'groupOfEntries' instead of 'groupOfNames'.

In draft-howard-rfc2307bis-02 'posixGroup' is declared as AUXILIARY, a change
which is forbidden according to Kurt's IANA rules.  And the draft contains a
declaration of 'groupOfMembers' which is pretty much the same as
'groupOfEntries'.  We will sort that out...

> Looking through the common schemas it seems that multiple inheritance
> is extremely rare, so I wonder whether all servers would even agree on
> how it works...

It works for me. :-)

Ok, it works in OpenLDAP since years.  We could send a poll ot ldapext and
ldapbis mailing lists which server products officially support multiple
inheritance.

Ciao, Michael.