Re: Auxiliary object class practically of no use?

2015-04-19 Thread Michael Ströder
dE wrote: On 04/18/15 03:24, Michael Ströder wrote: dE wrote: On 04/15/15 19:31, Howard Chu wrote: dE wrote: According to RFC 4512 An entry can belong to any subset of the set of auxiliary object classes allowed by the DIT content rule associated with the structural object class of t

Re: Structural object class rules

2015-04-19 Thread Michael Ströder
dE wrote: Suppose this is the superclass chain -- A -> B -> C -> D -> E -> F -> G Then for D, the superclass chain is A -> B -> C, and in this chain D is the most subordinate. Yes. For F, the superclass chain is A -> B -> C -> D -> E and here too F is the most subordinate. Yes. So what

Re: Structural object class rules

2015-04-19 Thread Michael Ströder
dE wrote: On 04/18/15 03:19, Michael Ströder wrote: dE wrote: Actually the question was -- What do you mean by 'most subordinate'? Is it that there must be no parallel structural object class at the same level in the class hierarchy? Yes. Strange rule. Hard to believe. Thanks for clarifyin

Re: All entries belong to the top object class?

2015-04-19 Thread Ryan Tandy
On Sun, Apr 19, 2015 at 11:42:16AM +0530, dE wrote: As per https://tools.ietf.org/html/rfc4512#section-3.3 When creating an entry or adding an 'objectClass' value to an entry, all superclasses of the named classes SHALL be implicitly added as well if not already present. That means the top

RE: How to disable SSF (integrity) on GSSAPI mech?

2015-04-19 Thread Osipov, Michael
> On 04/15/15 21:10 +, Osipov, Michael wrote: > >Hi folks, > > > >I am binding against Active Directory with GSSAPI mech and would like to > disable SASL integrity for debugging purposes with Wireshark. > Unfortunately, this call fails: > > > >char *secprops = "minssf=0,maxssf=0"; > >rc = ldap_

Re: Structural object class rules

2015-04-19 Thread dE
On 04/18/15 03:19, Michael Ströder wrote: dE wrote: On 04/15/15 19:28, Michael Ströder wrote: dE wrote: "An object or alias entry is characterized by precisely one structural object class superclass chain which has a single structural object class as the most subordinate object c

All entries belong to the top object class?

2015-04-19 Thread dE
As per https://tools.ietf.org/html/rfc4512#section-3.3 When creating an entry or adding an 'objectClass' value to an entry, all superclasses of the named classes SHALL be implicitly added as well if not already present. That means the top object class will always be there. Or is it that o

Re: Structural object class rules

2015-04-19 Thread dE
On 04/18/15 03:19, Michael Ströder wrote: dE wrote: On 04/15/15 19:28, Michael Ströder wrote: dE wrote: "An object or alias entry is characterized by precisely one structural object class superclass chain which has a single structural object class as the most subordinate object c

Re: Auxiliary object class practically of no use?

2015-04-19 Thread dE
On 04/18/15 03:24, Michael Ströder wrote: dE wrote: On 04/15/15 19:31, Howard Chu wrote: dE wrote: According to RFC 4512 An entry can belong to any subset of the set of auxiliary object classes allowed by the DIT content rule associated with the structural object class of the entry.

RE: catch size and performance

2015-04-19 Thread Greg Jetter
Version: 2.4.28-1.1ubuntu4.4 Greg From: Quanah Gibson-Mount [qua...@zimbra.com] Sent: Friday, April 17, 2015 10:57 AM To: Greg Jetter; openldap-technical@openldap.org Subject: Re: catch size and performance --On Thursday, April 16, 2015 8:59 PM + Greg

Re: how to check user lock status

2015-04-19 Thread Dario Zanzico
On Thu, Apr 16, 2015, at 06:38 AM, rockwang wrote: > Hi, all > > I set policy for user as following > # default, policies, abc.com > dn: cn=default,ou=policies,dc=abc,dc=com > objectClass: top > objectClass: device > objectClass: pwdPolicy > cn: default > pwdAttribute: userPassword > pwdMaxA