[Ietf-not43] First draft on Relay bags in FIRS

[Peter Gietz]

Leslie Daigle wrote:
> 
> I think the other issues have been sorted out one way
> or another, leaving:
> 
> Peter Gietz wrote:
> 
>>>> 4. Relationship to other search controls
>>>>
>>>>    The Relay Bag Search Control SHOULD NOT be used together with any
>>>>    other existing search controls.  If a new search control is to be
>>>>    used in combination with the Relay Bag Search Control the document,
>>>>    describing that new search control has to deal with possible
>>>>    implications.
>>>
>>>
>>>
>>>
>>> This seems like a really unfortunate and limiting requirement. 
>>
>>
>>
>> To be honest, I just wanted do evade to analyse the compatibility of 
>> all existing search controls with this one. I also didn't see any need 
>> for them. If in future additional FIRS controls will be specified they 
>> have to take this control into consioderation though.
>>
>> Would you feel more comfortable, if I changed the "SHOULD NOT" into  
>> "is not intended to"
> 
> 
> I believe that's a better formulation, but the root of my concern
> is this:  it still seems you're cutting away at the flexibility of
> LDAP by asserting things that cannot be used in conjunction with the
> FIRS-specific use.
> 
> I understand why that is, and personally believe it is the necessary
> approach to pitch LDAP at a specific, complex application (I did,
> after all, some pretty serious and crude hacking myself for the
> TISDAG project :-)

I included the respective section in accordance to "Considerations for 
LDAP Extensions" (draft-zeilenga-ldap-ext-04). There are only a few 
search controls specified in RFCs and it is not too much of a hazle to 
analyse their interaction with the FIRS relay bag control. The most 
important that comes into my mind now is Scrolling View Browsing of 
Search Results 
(http://www.ietf.org/internet-drafts/draft-ietf-ldapext-ldapv3-vlv-09.txt), 
which would not interfere with the relay bag control. I just didn't have 
time tosearch for all search controls and make comments with respect to 
the relay bag control. If people think it is worth while, I will include 
respective language into the draft, but not in the version 02 I intend 
to submit to the list tonight.

> 
> However, this is also one of the reasons that I disbelieve that LDAP
> is as conveniently-usable a solution to this problem as some believe.

I don't really understand this argument: only because there are 
additional features in LDAP that might have a mere theoretical impact to 
FIRS features, why does this make LDAP a bad choice. The difference 
between the IRIS and the FIRS approach is that IRIS is more 
encapsulated, thus being more a protocol of its own than an addition to 
an existing protocol, which means using IRIS will give you exactly what 
IRIS specifies, with FIRS you will get what FIRS specifies and 
additional LDAP features that might or might not be usefull for crisp.

Cheers,

Peter

> 
> Leslie.
> 
> 
> 

-- 
_______________________________________________________________________

Peter Gietz (CEO)
DAASI International GmbH                phone: +49 7071 2970336
Wilhelmstr. 106                         Fax:   +49 7071 295114
D-72074 Tübingen                        email: peter.gietz at daasi.de
Germany                                 Web:   www.daasi.de

Directory Applications for Advanced Security and Information Management
_______________________________________________________________________