Return-Path: Delivered-To: apmail-directory-dev-archive@www.apache.org Received: (qmail 17534 invoked from network); 30 Mar 2007 19:02:51 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 30 Mar 2007 19:02:51 -0000 Received: (qmail 48074 invoked by uid 500); 30 Mar 2007 19:02:58 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 48042 invoked by uid 500); 30 Mar 2007 19:02:58 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 48031 invoked by uid 99); 30 Mar 2007 19:02:58 -0000 Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 30 Mar 2007 12:02:58 -0700 X-ASF-Spam-Status: No, hits=2.0 required=10.0 tests=HTML_MESSAGE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of elecharny@gmail.com designates 66.249.92.169 as permitted sender) Received: from [66.249.92.169] (HELO ug-out-1314.google.com) (66.249.92.169) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 30 Mar 2007 12:02:49 -0700 Received: by ug-out-1314.google.com with SMTP id 71so918253ugh for ; Fri, 30 Mar 2007 12:02:27 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:references; b=EJZE9d0O0Iz1QEjnWZcCOu6ZShYXzQKVMnKZaJeN+E2z9DqF0O5PXRfAGZpX1d74+QEhpAEBfMip1YUlJsIM/QEFwxzYJoBnFU8DWQPnd6ji0r54d7VWJs45OsdBYNZfmw3UpskdIyXlcK+B2D2NOWMyvdoqRQppDnEYW1bnshk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:references; b=Au8ciYFZpDQgdcH8xQ/BCE3b1F7C3evanHpCtlwY791QR8HkRkVL3+rA4Ewcww418XrLeLb1eDLutOXpD4ptoEm10mUFXC6savNjpfcWNpCxXOmtoVfsbFqpzDyX2EyP1V+I9aua6Jsnmnos5DZzMjIEuG0TCaWOqM3/NGRDhqw= Received: by 10.78.20.13 with SMTP id 13mr1031449hut.1175281347008; Fri, 30 Mar 2007 12:02:27 -0700 (PDT) Received: by 10.78.23.3 with HTTP; Fri, 30 Mar 2007 12:02:26 -0700 (PDT) Message-ID: Date: Fri, 30 Mar 2007 21:02:26 +0200 From: "Emmanuel Lecharny" Reply-To: elecharny@iktek.com To: "Apache Directory Developers List" Subject: Re: V1.0.1 schema In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_77951_1971589.1175281346971" References: X-Virus-Checked: Checked by ClamAV on apache.org ------=_Part_77951_1971589.1175281346971 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Hi Tony, the groupOfNames ObjectClass contains cn and member as MUST attributes. You may try this one . Emmanuel On 3/30/07, Tony Thompson wrote: > > In v1.0 and even a 1.0.1 snapshot I had, I had hijacked the "member" > attribute and used it on an "inetorgperson" to track that users group > membership. Even though technically the schema didn't allow "member" on = an > "interorgperson", Apache let me do it anyway. It looks like the 1.0.1fin= al release fixed that hole and it will no longer allow me to use the > "member" attribute on an "inetorgperson". If I want to keep track of gro= up > membership on a user object, is there an attribute that I should use? Wi= ll > there ever be one in the base schema for that purpose? Should I add my o= wn > "memberOf" attribute to use instead? > > Thanks > Tony > > This message (and any associated files) is intended only for the > use of the individual or entity to which it is addressed and may > contain information that is confidential, subject to copyright or > constitutes a trade secret. If you are not the intended recipient > you are hereby notified that any dissemination, copying or > distribution of this message, or files associated with this message, > is strictly prohibited. If you have received this message in error, > please notify us immediately by replying to the message and deleting > it from your computer. Messages sent to and from Stoneware, Inc. > may be monitored. > > --=20 Cordialement, Emmanuel L=E9charny www.iktek.com ------=_Part_77951_1971589.1175281346971 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Hi Tony,

the groupOfNames ObjectClass contains cn and member as MUST= attributes. You may try this one .

Emmanuel

On 3/30/07, Tony Thompson <Tony.Thompson@stone-wa= re.com> wrote:
In v1.0 and even a=20 1.0.1 snapshot I had, I had hijacked the "member" attribute and u= sed it on an=20 "inetorgperson" to track that users group membership.  Even = though=20 technically the schema didn't allow "member" on an "inte= rorgperson", Apache let=20 me do it anyway.  It looks like the 1.0.1 final release fixed that hol= e and=20 it will no longer allow me to use the "member" attribute on an=20 "inetorgperson".  If I want to keep track of group membershi= p on a user=20 object, is there an attribute that I should use?  Will there ever be o= ne in=20 the base schema for that purpose?  Should I add my own "memberOf&= quot; attribute=20 to use instead?
 
Thanks
Tony
 
This message (and = any associated files) is intended only for the
use of the individual or= entity to which it is addressed and may
contain information that is co= nfidential, subject to copyright or
constitutes a trade secret. If you are not the intended recipient
y= ou are hereby notified that any dissemination, copying or
distribution = of this message, or files associated with this message,
is strictly pro= hibited. If you have received this message in error,=20
please notify us immediately by replying to the message and deleting it from your computer. Messages sent to and from Stoneware, Inc.
may b= e monitored.




--
Cordialement,
Emmanu= el L=E9charny
www.iktek.com ------=_Part_77951_1971589.1175281346971--