Francis Cianfrocca wrote:
does anyone use the Oasis DSML standard? It's a mapping between standard LDAP/LDIF operations and data structures to XML. There are some Java tools that handle DSML. I just saw a requirement for accessing an LDAP server by a service that requires results encoded in DSML, so I thought I'd better add this support to the Net::LDAP library.
Is this of interest to any of you? Interesting enough that you'd be willing to help beta-test it :-)?
That seems like a lot of work, and when I looked I had the impression that there wasn't much activity around DSML. (If you take a look at the email archives here: http://lists.oasis-open.org/archives/dsml/ you won't see any actual discussion later than April 2003)
If you are extending Net::LDAP, it would be good to have the ability to add LDAP controls to bind requests and operation requests, as well as to be able to handle controls associated with responses. This appears to be a standard extension mechanism for LDAP, and it is supported by JNDI. I think Net::LDAP has some capability for handling controls associated with responses, but I can't see any facility for adding controls to binds and operation requests.
Some administrative operations on IBM's Tivoli Directory Server require the use of an "administrative control" in the bind and the operation request. The specific example I am aware of is that TDS can be configured to lock a user out after a number of consecutive failed logins. The locked-out status is represented by a couple of operational attributes on the user entry, and can be reset by deleting those attributes. The deletion is only permitted when both the bind and the modification request carry the IBM-defined administrative control.
This is something that we can do with JNDI, but would not be able to do with Net::LDAP.
P.S. With respect to our earlier discussion, my own tests on OpenLDAP show that it respects the ordering and atomicity requirements for multiple modification operations in an LDAP modify command. When I started doing similar tests on TDS I ran into a problem, and haven't had time yet to try again.