---------- Forwarded message ---------- From: Alex Karasulu <[email protected]> Date: Tue, Feb 23, 2010 at 12:05 PM Subject: Re: Bind Request processing To: [email protected]
On Tue, Feb 23, 2010 at 12:03 PM, Emmanuel Lécharny <[email protected]> wrote: > On 2/23/10 11:00 AM, Alex Karasulu wrote: >> >> On Tue, Feb 23, 2010 at 11:55 AM, Emmanuel Lecharny<[email protected]> >> wrote: >> >>> >>> Hi guys, >>> >>> as I'm writing thorough tests for the BindRequest operation using the new >>> LDAP API, I'm also reviewing the way ADS handle this operation. I already >>> found some issues, and I'm sure there are more. >>> >>> I have one question regarding BindOperation done while we have some other >>> operations being processed: what should we do ? RFC 4511 says (4.2.1) : >>> >>> "Before processing a BindRequest, all uncompleted operations MUST either >>> complete or be abandoned". >>> >> >> >>> >>> What do we want to implement ? Complete current operations or abandon all >>> of >>> them? >>> >> >> Why not both? Let's make this a configuration parameter on the >> BindHandler. >> >> WDYT? >> > > yes, we can, optionally. > > In any case, we will have to set a gate keeper to forbid any new operation > to enter the server as soon as a BindRequest is sent. I already have > implemented some, but it fails when doing a multi-step bind (SASL). You just need to stop new operations on that socket not the whole server right? -- Alex Karasulu My Blog :: http://www.jroller.com/akarasulu/ Apache Directory Server :: http://directory.apache.org Apache MINA :: http://mina.apache.org -- Alex Karasulu My Blog :: http://www.jroller.com/akarasulu/ Apache Directory Server :: http://directory.apache.org Apache MINA :: http://mina.apache.org
