[dsml] Questions on bind operation

[Jeff Parham <jeffparh@windows.microsoft.com>]

Title: Message

We long ago agreed that support for proxying via the DSML 2 bind operation is optional, right?  If that's correct, can we add a statement to that effect to section 5.1?  Can we also add a statement as to what a DSML 2 server should return if it does not support proxying (maybe an errorResponse with type="authenticationFailed")?

 

How does bind operate when processing="parallel"?  If processing="parallel" and onError="resume", does the DSML 2 server continue to issue the remaining operations in the batch request even if the proxy bind fails (or is not supported)?  Perhaps complicating the answers to these questions is that the only implementation of password-less proxying I'm aware of (Rob's LDAP Proxied Authorization Control -- see attachment in Christine's mail from 8/14) is not an LDAP bind; it's an LDAP control that accompanies individual LDAP operations.  (E.g., does a DSML 2 server that supports the proxied auth control know if the proxy will succeed after processing the bind request or only after issuing a subsequent operation that uses the proxied auth control?)

 

Are multiple bind operations allowed in an envelope?  If so, how does that affect the above?

 

-J