[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Issues in LDAP schema IDs


David Chadwick wrote: 

Peter and I have resolved all the issues described at the PKIX meeting
today, apart from one, which is what should be the attribute type to be
used to hold the X.509 DER encoded attribute. Should it be the original
attribute type name e.g. userCertificate or a new attribute whose schema
says it must be single valued.


I'd strongly argue for back-wards compability with existing clients
=> userCertificate

Off course there should be a directory profiling note stating that there MUST NOT more than one attribute value to be compliant. The caveat is off-course that the directory can't enforce the SINGLE-VALUE restriction by schema definition.

Ciao, Michael.