possSuperiors - why does AD have it, but not openldap
Having used openldap and now getting to know MS active directory (AD), I
realize that in AD there is an attribute called "possSuperios", which
defines which objects are allowed as parent objects. Afaik this is not
present in openldap. (How is decided which objects are allowed as parents
in openldap?)
Can anyone shed some light on this design decision? Does having
possSuperios make AD more rubobst? Or more flexible? I am just curious
about why one would choose to do it this or the other way.
No comments:
Post a Comment