[Freeipa-devel] LDAP over XML

Karl MacMillan kmacmill at redhat.com
Thu Jul 19 13:11:33 UTC 2007


On Thu, 2007-07-19 at 07:54 -0400, Etienne Goyer wrote:
> Hi guys,
> 
> I'm just a lurker interested in FreeIPA.  I do not want to waste your
> time, but I wonder ...
> 
> Rob Crittenden wrote:
> > Rob Crittenden wrote:
> >> I've been going back and forth over how much LDAP information to
> >> reveal over RPC. At this point it is simply easier to reveal it all
> >> (as granted by LDAP ACLs of course). We can remove stuff in the future
> >> (like objectclass) but for now I'm going to transmit everything I think.
> 
> Why do "LDAP over XML" in the first place ?  Can't the client just query
> the directory server directly ?  This seem very awkward to me.
> 

I have to agree - as soon as we start passing back ldif we should just
go for LDAP queries.

Karl





More information about the Freeipa-devel mailing list