groupOfNames, posixGroup and rfc2307bis.schema

[Oliver Henriot]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear list members,

I have groups in my directory which are groupOfNames. I would need them
to also be posixGroup in order to hold a gid. With core.schema and
nis.schema this is not possible as both groupOfNames and posixGroup are
both STRUCTURAL.

It has been pointed out to me that rfc2307bis.schema would allow this as
this scheme defines posixGroup as AUXILIARY.

However, as far as I understand, rfc2307bis.schema is stemmed from an
RFC which has not been validated. RFC 2307 on the other hand is still
valid, but with status experimental. Is that to say that it will not
evolve beyond this point? I have little other info concerning this
standard. Is rfc2307bis.schema likely to evolve or is it pretty much a
fixed standard?

Can anyone tell me if rfc2307bis.schema is something which can be
recommended for use in a working ldap directory or if an another more
elegant or less experimental solution exists?

Thanks.
- --
Oliver Henriot B.Sc. Ph.D. | Technicien de Maintenance
Moyens Informatiques et Multimédia | UMS MI2S | http://mi2s.imag.fr/
Domaine universitaire BP53 | 38041 Grenoble cedex 9 | France
tel.: [phone] | fax: [phone]




-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkmxOhUACgkQSWuBJnHIHdJeqwCeIN4BwcMbCedVwPc9lWlb50k1
V7QAnRR3/JUcf2wB4nQ4poo/oynLtWPH
=LlRl
-----END PGP SIGNATURE-----

[hyc (Bugzilla)]

> From: Oliver Henriot<Oliver.Henriot@...>
> Date: Fri, 06 Mar 2009 15:58:30 +0100

> Dear list members,
>
> I have groups in my directory which are groupOfNames. I would need them
> to also be posixGroup in order to hold a gid. With core.schema and
> nis.schema this is not possible as both groupOfNames and posixGroup are
> both STRUCTURAL.
>
> It has been pointed out to me that rfc2307bis.schema would allow this as
> this scheme defines posixGroup as AUXILIARY.
>
> However, as far as I understand, rfc2307bis.schema is stemmed from an
> RFC which has not been validated. RFC 2307 on the other hand is still
> valid, but with status experimental. Is that to say that it will not
> evolve beyond this point? I have little other info concerning this
> standard. Is rfc2307bis.schema likely to evolve or is it pretty much a
> fixed standard?
>
> Can anyone tell me if rfc2307bis.schema is something which can be
> recommended for use in a working ldap directory or if an another more
> elegant or less experimental solution exists?

At this point I would use RFC2307bis. Various authors have stepped up to
release a final version of a newer spec but it keeps falling by the wayside.
Still, any new spec is going to look more like RFC2307bis than RFC2307.

> Thanks.
> - --
> Oliver Henriot B.Sc. Ph.D. | Technicien de Maintenance
> Moyens Informatiques et Multim=E9dia | UMS MI2S | http://mi2s.imag.fr/
> Domaine universitaire BP53 | 38041 Grenoble cedex 9 | France
> tel.: [phone] | fax: [phone]

--
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

[Oliver Henriot]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear Howard,

Dans sa grande sagesse, Howard Chu a écrit, le 07.03.2009 06:31 :

>> From: Oliver Henriot<Oliver.Henriot@...>
>> Date: Fri, 06 Mar 2009 15:58:30 +0100
>
>> Can anyone tell me if rfc2307bis.schema is something which can be
>> recommended for use in a working ldap directory or if an another more
>> elegant or less experimental solution exists?
>
> At this point I would use RFC2307bis. Various authors have stepped up to
> release a final version of a newer spec but it keeps falling by the
> wayside. Still, any new spec is going to look more like RFC2307bis than
> RFC2307.

Thank you very much for your advice.

Cheers,

P.S. I hope you have a nice stay in France ;-)
- --
Oliver Henriot B.Sc. Ph.D. | Technicien de Maintenance
Moyens Informatiques et Multimédia | UMS MI2S | http://mi2s.imag.fr/
Domaine universitaire BP53 | 38041 Grenoble cedex 9 | France
tel.: [phone] | fax: [phone]


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkm6EQkACgkQSWuBJnHIHdKd7gCfcF/gQbags4LGBsaXksoxwAQf
XFgAoNJr6asvpSUkAxYVid1isJN1TpLc
=mx94
-----END PGP SIGNATURE-----