Principal to directory object mapping
srahul at novell.com
Thu Jul 27 01:12:48 EDT 2006
When I wrote 'association', I was not referring to any particular way
of associating principals to directory objects (links, containment or
auxiliary class). I just wanted to propose a way to do the mapping in
the background. When I said "principal is associated with object", I
actually meant "principal is *mapped* to object". A way to implement it
in the directory has been proposed by Praveen in his mail (Sub:
Associating Kerberos identities to LDAP object).
Sam Hartman wrote:
> First, I think we need to distinguish two things: association and
> Association is when a link is crated either from a directory object to
> a principal object or from a principal object to a directory object.
> Containment is when a principal auxiliar class is used inside a directory mapping.
> In your message are you talking about association or containment?
More information about the krbdev