Re: people CN

[Andrew Findlay <[e-mail]>]

>1) Your name is your name and shall remain intact. Pseudo solution like
>	"cn=Christian Huitema number 1234567"
>are not acceptable.

Agreed.

>Now, suppose there are two "Jacques Martin", one being the director of the
>organization with internal number 1234 and the other one being a repair technician
>with internal number 5678. And look at the various possible signatures:
>
>	This contract is signed by "Jacques Martin", internal number "5678" in
>	organization "FooBar" in "France". 
>
>	This contract is signed by "Jacques Martin", whose role is "repair
>	technician" in organization "FooBar" in "France". 
>
>	This contract is signed by "Jacques Martin", whose role is "director" 
>	in organization "FooBar" in "France".
>
>May I suggest that using a "Role" attribute would, in general, be "a good thing"?
>Something like:
>
>	cn=Jacques Martin + Role=Director, O=FooBar, C=FR

Good point, but I think it is confusing the person with the capacity
in which they signed the document. This confusion is common in real
life, but the distinction can be important.

In the case above, I would expect a contract to be signed by `a
Director whose name is Jacques Martin' rather than `Jacques Martin who
is a director'. Subtle but important. Consider the same director's
contract of employment: it is signed by Jacques Martin, but *not* in
his role as Director (probably in his role as a residential person if
we are persuing this to a logical conclusion!).

I expect each person to have at least three entries in the Directory:

	Residential Person (i.e. private individual)
	Organistional Person (i.e. employee)
	Organisational Role (there may be many of these)

When considering signatures, I would expect the appropriate one to be
used depending on the circumstances. Some roles could be shared, in
which case many people might share a signature (`duty officer').


Relating all this back to the original point about choosing names, I
think it is a *bad* idea to give someone an `Organistional Person' DN
which includes their job title. People get promoted from time to time,
but that does not change the fact that they are an employee of the
same organisation.

Andrew
-- 

----------------------------------------------------------------------------
|      From Andrew Findlay at Brunel University, Uxbridge, UB8 3PH, UK     |
| [e-mail]       [phone] or [phone] x2512 |
----------------------------------------------------------------------------