I think that 'uniquemember' is the correct way to get the desired functionality.
Thanks Baban for pointing out the the 2005 RFC2307.
It can then be mapped to 'member' for use with AD.



Luke Howard wrote:
> 
> On 16/05/2009, at 5:55 AM, Baban Kenkre wrote:
> 
>> I see that rfc2307bis suggests 'uniquemember'. Since nss_ldap follows 
>> rfc2307bis, it should use 'uniquemember' to be consistent.
>>
>> Now, the AD specific 'member' could either be specified using schema 
>> mapping or the code could support both 'uniquemember' and 'member' and 
>> handle duplicates.
> 
> PADL nss_ldap uses uniqueMember (which is typically mapped to member for 
> AD).
> 
> -- Luke
> _______________________________________________
> sparks-discuss mailing list
> sparks-discuss at opensolaris.org
> http://mail.opensolaris.org/mailman/listinfo/sparks-discuss

Reply via email to