directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ersin Er <ersin...@gmail.com>
Subject Auxiliary objectClasses for specific subentries
Date Tue, 06 Jun 2006 08:16:11 GMT
Hi all,

I was looking at X.501 specification, section 14.5 about "System schema 
supporting access control". It says:/

If a subentry contains prescriptive access control information, then its 
objectClass attribute shall contain the value
accessControlSubentry:

    accessControlSubentry OBJECT-CLASS ::= {
        KIND auxiliary
        ID id-sc-accessControlSubentry }

A subentry of this object class shall contain precisely one prescriptive 
ACI attribute of a type consistent with the value of
the id-sc-accessControlScheme attribute of the corresponding access 
control specific point.

/My question is: what's the point of /not having/ an attribute specifier 
in the objectClass definition like this:

/    accessControlSubentry OBJECT-CLASS ::= {
        KIND auxiliary
        ID id-sc-accessControlSubentry
        MUST CONTAIN {prescriptiveACI} }
/?

Thanks.

-- 
Ersin

Mime
View raw message