Re: Basic Cert-2-Directory mapping question

[Michael Ströder <michael@xxxxxxxxxxxx>]

Tom Gindin wrote:
> 
> wouldn't it be reasonable to define a search
> syntax for them which uses keywords to identify fields, rather than the
> generic ASN.1 facility you proposed?  I cannot believe that it is really
> appropriate to require LDAP queries for known ASN.1 types to specify
> matching rules within the query.

As far as I understand this I-D the LDAP client will just construct
LDAP filter strings as usual. The LDAP server deals with the ugly
stuff as it deals with ASN.1 structures when doing searches anyway.

Steve, David, correct me if I'm wrong.

Ciao, Michael.