[tpop3d-discuss] Re: LDAP search scope (was: tpop3d v1.4.1pre4)

[Prune]

Chris Lightfoot wrote:
> On Mon, Feb 25, 2002 at 05:14:24PM +0100, Prune wrote:
>     [...]
> > the scope is 2 (sub).
> >     
>
> Is this a useful thing to be able to configure?
>
>     
no,
    
the scope is the way to tell ldap to search at the level specified in the
DN, or one level under, or all levels under.
ex : 
    
            ou=us
                |
                |
    +--------------------+
ou=foo                ou=bar
    |                            |
                    +------------------+
            uid=john                uid=ben
    
    
If you specify as base dn :    dn: ou=us
    
a search of scope 0 will return nothing, as you only have ou=us in this scope
a scope of 1 will return ou=foo or ou=bar
a scope of 2 will return ou=foo, ou=bar,  uid=john and uid=ben
    
Normaly, depending on your schema, you define the base DN as far as possible.
If you only want to authenticate users in ou=bar, that gives : ou=bar,ou=us
there will be no difference between scope 1 or 2.
    
If you define something below uid=xxx, then you may need to change the scope....
but I don't think this is used in ldap design.
    
Prune