2005/9/23, Trustin Lee <[EMAIL PROTECTED]>:
I thought over this and I concluded that 'ou=users,ou=system' should be apDN thought it doesn't need to be a real administrative point. We should be OK to evaluate SubtreeSpecification with apDN regardless it is an administrative point or not. Just fixing administration point for users helps me to implement 'subtree' userClass without much compromise. WDYT?
Trustin
-- Now I see that we can get apDN easily in case of prescriptiveACI because it is an attribute of subentry. But what about entryACI? How can I find an appropriate administrative point?
I thought over this and I concluded that 'ou=users,ou=system' should be apDN thought it doesn't need to be a real administrative point. We should be OK to evaluate SubtreeSpecification with apDN regardless it is an administrative point or not. Just fixing administration point for users helps me to implement 'subtree' userClass without much compromise. WDYT?
Trustin
what we call human nature is actually human habit
--
http://gleamynode.net/
