On Thu, Dec 02, 2010 at 11:01:45AM -0800, Quanah Gibson-Mount wrote:
>> In the LDAP email schemas I am familiar with, "mail" is the *primary*
>> email address, and is not multi-valued. It is unfortunate that it is
>> multi-valued in your particular schema. We have:
>>
>> mail: primary-rfc822-email-address; single
>
> The "mail" attribute is, and always has been, multi-valued per RFC. If
> your mail attribute is single valued, then you are likely using AD, which
> is not LDAP, but a severe bastardization that breaks standards left and
> right. The RFC clearly leaves it multi-valued:
I am not using AD, though instances of AD exist in our environment
that hold mail data mirrored from non-AD LDAP masters. Our
Unix LDAP servers have single-valued "mail", and multi-valued
"mailalternateaddress". Perhaps at the schema-level "mail" is in fact
declared multi-valued, but if so, all our tooling ensures that it is
not used that way, we only allow multiple values for mailalternateaddress.
It is sensible to have a designated attribute for the primary (canonical
if you like) email address. If the RFC LDAP schemas don't support this,
that's too bad for the RFC schemas.
--
Viktor.