python-ldap-dev

About schema

[<fo...@mi...>]

Hi,

	i am just restarting to work on the high level python-ldap api and
the lappo LDAP browser. some months ago we talked about schema (ldap 3)
support and how to implement it. a guy promised a draft that was never
posted (or, maybe, i lost it.)

	anyway, has somebody a pointer to good schema documentation and/or
ideas on how this stuff should be supported in python-ldap?

ciao,
federico

-- 
Federico Di Gregorio
MIXAD LIVE System Programmer                           fo...@mi...
Debian GNU/Linux Developer & Italian Press Contact        fo...@de...
                             Best friends are often failed lovers. -- Me

Re: About schema

[David L. <dav...@cs...>]

On Tue, 4 Jul 2000, Federico Di Gregorio typed thusly:

> Hi,
> 
> 	i am just restarting to work on the high level python-ldap api and
> the lappo LDAP browser. some months ago we talked about schema (ldap 3)
> support and how to implement it. a guy promised a draft that was never
> posted (or, maybe, i lost it.)
> 
> 	anyway, has somebody a pointer to good schema documentation and/or
> ideas on how this stuff should be supported in python-ldap?

i know the ietf drafts are available at www.ietf.org.
their search page resulted in:

http://www.dmtf.org/spec/cims.html
http://search.ietf.org/internet-drafts/draft-ietf-policy-core-info-model-06.txt
http://search.ietf.org/internet-drafts/draft-ietf-policy-core-schema-06.txt

maybe these help?

-- 
David Leonard                           Dav...@cs...
Dept of Comp. Sci. and Elec. Engg   _   Room:78-640  Ph:+61 7 336 51187
The University of Queensland       |+|  http://www.csee.uq.edu.au/~leonard/
QLD 4072  AUSTRALIA               ~` '~ E2A24DC6446E5779D7AFC41AA04E6401

Curses! - Mojo Jojo

Re: About schema

[<fo...@mi...>]

Scavenging the mail folder uncovered David Leonard's letter:
> On Tue, 4 Jul 2000, Federico Di Gregorio typed thusly:
> 
> > Hi,
> > 
> > 	i am just restarting to work on the high level python-ldap api and
> > the lappo LDAP browser. some months ago we talked about schema (ldap 3)
> > support and how to implement it. a guy promised a draft that was never
> > posted (or, maybe, i lost it.)
> > 
> > 	anyway, has somebody a pointer to good schema documentation and/or
> > ideas on how this stuff should be supported in python-ldap?
> 
> i know the ietf drafts are available at www.ietf.org.
> their search page resulted in:
> 
> http://www.dmtf.org/spec/cims.html
> http://search.ietf.org/internet-drafts/draft-ietf-policy-core-info-model-06.txt
> http://search.ietf.org/internet-drafts/draft-ietf-policy-core-schema-06.txt
> 
> maybe these help?

sure. /me enters documentation-mode...

-- 
Federico Di Gregorio
MIXAD LIVE System Programmer                           fo...@mi...
Debian GNU/Linux Developer & Italian Press Contact        fo...@de...
                             Best friends are often failed lovers. -- Me

Re: About schema

[Michael <mi...@st...>]

David Leonard wrote:
> 
> On Tue, 4 Jul 2000, Federico Di Gregorio typed thusly:
> 
> >       anyway, has somebody a pointer to good schema documentation and/or
> > ideas on how this stuff should be supported in python-ldap?
> 
> i know the ietf drafts are available at www.ietf.org.
> their search page resulted in:
> 
> http://www.dmtf.org/spec/cims.html
> http://search.ietf.org/internet-drafts/draft-ietf-policy-core-info-model-06.txt
> http://search.ietf.org/internet-drafts/draft-ietf-policy-core-schema-06.txt

Isn't CIM a little bit too high-level for implementing LDAPv3?

Ciao, Michael.

Re: About schema

[Michael <mi...@st...>]

Federico Di Gregorio wrote:
> 
>         i am just restarting to work on the high level python-ldap api and
> the lappo LDAP browser. some months ago we talked about schema (ldap 3)
> support and how to implement it. a guy promised a draft that was never
> posted (or, maybe, i lost it.)

Well, I promised to make a draft for a LDAP class library but I did
not have the time. It's still in my mind to write something like
this because it would make some parts of web2ldap much cleaner.

Such a class library should contain classes for syntaxes,
attributes, objectclasses and whole entries. E.g. take a look at the
schema configuration files coming with OpenLDAP 2.0. You'll find
things like

----------------- snip -------------------
objectClass: ( 1.3.6.1.4.1.4203.666.3.3 NAME 'OpenLDAPorg'
        DESC 'OpenLDAP Organizational Object'
        SUP pilotOrganization 
        MAY ( authPassword $ displayName $ labeledURI ) )

attributetype ( 0.9.2342.19200300.100.1.2 NAME
'textEncodedORAddress'
        EQUALITY caseIgnoreMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
----------------- snip -------------------

which gives a pretty good idea of what is need as attributes in a
objectClass object or attribute object. These things should all be
indexed/referenced by the unique, numerical OID.

Hmm, I could not find syntax definitions in OpenLDAP 2.0 alpha4 but
you can query LDAPv3 servers for their locally-defined schema. I
attached the schema of ldap.surfnet.nl in LDIF which might give you
a rough idea of the whole thing.

Ciao, Michael.

Re: About schema

[<fo...@mi...>]

that's what i needed. thank you very much. the problem is much clear
now. btw, do you know how oid are generated/assigned? i draft something
and let you know on this list in a week or so...

ciao,
federico

Scavenging the mail folder uncovered Michael Ströder's letter:
> Federico Di Gregorio wrote:
> > 
> >         i am just restarting to work on the high level python-ldap api and
> > the lappo LDAP browser. some months ago we talked about schema (ldap 3)
> > support and how to implement it. a guy promised a draft that was never
> > posted (or, maybe, i lost it.)
> 
> Well, I promised to make a draft for a LDAP class library but I did
> not have the time. It's still in my mind to write something like
> this because it would make some parts of web2ldap much cleaner.
> 
> Such a class library should contain classes for syntaxes,
> attributes, objectclasses and whole entries. E.g. take a look at the
> schema configuration files coming with OpenLDAP 2.0. You'll find
> things like
> 
> ----------------- snip -------------------
> objectClass: ( 1.3.6.1.4.1.4203.666.3.3 NAME 'OpenLDAPorg'
>         DESC 'OpenLDAP Organizational Object'
>         SUP pilotOrganization 
>         MAY ( authPassword $ displayName $ labeledURI ) )
> 
> attributetype ( 0.9.2342.19200300.100.1.2 NAME
> 'textEncodedORAddress'
>         EQUALITY caseIgnoreMatch
>         SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
> ----------------- snip -------------------

-- 
Federico Di Gregorio
MIXAD LIVE System Programmer                           fo...@mi...
Debian GNU/Linux Developer & Italian Press Contact        fo...@de...
           Nobody will ever need more than 640k RAM! -- Bill Gates, 1981
           Windows 95 needs at least 8 MB RAM.       -- Bill Gates, 1996
           Nobody will ever need Windows 95.       -- logical conclusion

Re: About schema

[Michael <mi...@st...>]

Federico Di Gregorio wrote:
> 
> btw, do you know how oid are generated/assigned?

Get your own organizational OID arc on:

  http://www.isi.edu/cgi-bin/iana/enterprise.pl

Up to now registration is free.

You have to set up your own registration service which assigns the
unique sub-OIDs in your arc. All having the same prefix IANA
assigned to your organization.

Ciao, Michael.