Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:71042
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain stepping-stone.ch from 194.176.109.206 cause and error)
Message-ID: <1389360295.4809.122.camel@storm>
Reply-To: tiziano.mueller@stepping-stone.ch
To: internals@lists.php.net
Cc: Stig Venaas <venaas@php.net>, Douglas Goldstein <cardoe@php.net>, 
	Pierre-Alain Joye
	 <pajoye@php.net>
Date: Fri, 10 Jan 2014 14:24:55 +0100
Organization: stepping stone GmbH
Content-Type: text/plain; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: Exposing LDAP controls
From: tiziano.mueller@stepping-stone.ch (Tiziano =?ISO-8859-1?Q?M=FCller?=)

Hi there

As suggested by Pierre, I am now resending this on the internals ml
(with some minor clarifications):

While trying to add support for LDAP assertions (rfc4528, [1]) in the
PHP LDAP bindings I started to think about whether it would be a good
idea to expose LDAP controls (resp. LDAP control values) to the PHP
user directly.

I think it would allow more flexibility when implementing other
controls, like the the LDAP Extension for Scrolling View Browsing of
Search Results [2a], [2b]. Furthermore it would follow a similar
approach as the Python LDAP library. On the other hand it probably makes
the features harder to use than with custom wrappers (like already done for the
pagination extension), but this is again something which could be solved
by pure PHP wrapper libraries.

This means we would have different functions for generating specific
controls, represented as resources to the PHP user. A list of such
resources can then be passed to the ldap_modify, etc. functions (like
the corresponding C functions).

What do you think?

Thanks in advance,
best,
Tiziano


[1] https://github.com/php/php-src/pull/538
[2a] http://www.ietf.org/proceedings/55/I-D/draft-ietf-ldapext-ldapv3-vlv-09.txt
[2b] http://www.openldap.org/software/man.cgi?query=slapo-sssvlv&apropos=0&sektion=0&manpath=OpenLDAP+2.4-Release&format=html

-- 
stepping stone GmbH
Neufeldstrasse 9
CH-3012 Bern
Telefon: +41 31 332 53 63
www.stepping-stone.ch
tiziano.mueller@stepping-stone.ch