Grouper Developers Forum

[Tom Zeller <>]

> So, there are a couple of options. One is to handle the MUST member
> attribute in a subclass of the spml-to-ldap-connector
> (LdapTargetProvider, ala OpenLdapTargetProvider extends
> LdapTargetProvider). I was thinking of avoiding this kind of
> customization in the spml-to-ldap-connector, since it would be sort of
> hidden away. Another option is for the PSP to handle this (like ldappc
> does now). The second option would be bending spml, in that when
> ReturnData is set to "data", we'll still return an empty reference
> which should really only be present when ReturnData is set to
> "everything". We could define a custom ReturnData value, for example,
> "required", but this might be too much for a first release.
>
> Thoughts on bending spml ?

For the archives, I opted for extending the spml-to-ldap-connector to
handle the groupOfNames objectclass which requires (MUST) the member
attribute. The spml spec says that <capabilityData> elements
(references) MUST NOT be returned if returnData="data".

So, we will behave properly, as far as spml is concerned.