From list@netscape.com Thu Feb 1 14:23:14 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA09014 for ; Thu, 1 Feb 2001 14:23:13 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f11JLYb02661; Thu, 1 Feb 2001 11:21:35 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f11JLZI22150; Thu, 1 Feb 2001 11:21:35 -0800 (PST) Resent-Date: Thu, 1 Feb 2001 11:21:35 -0800 (PST) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.5.1 Date: Thu, 01 Feb 2001 12:21:13 -0700 From: "Jim Sermersheim" To: Cc: , , , Subject: Another Persistent Search question Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id f11JLXv22107 Resent-Message-ID: <"qbrI4.A.kZF.-cbe6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit It's not clear whether or not entries are returned that do not match the search criteria. Most confusing is 4.c. It says that: As changes are made to the server, the effected entries MUST be returned to the client if they match the standard search cri- teria and if the operation that caused the change is included in the changeTypes field. The changeTypes field is the logical OR of one or more of these values: add (1), delete (2), modify (4), modDN (8)." If an entry was deleted, it no longer matches the search criteria. I believe the intent of the authors here is to have that entry returned. If an entry is modified or renamed, it may cause it to leave the original result set of the search criteria. I don't know whether or not the authors intended these entries to be returned. If they are returned, there are cases that would be difficult for the client to determine if the entry still belongs in the result set. Can someone clear this up? Thanks. Jim From list@netscape.com Fri Feb 2 10:02:38 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id KAA11148 for ; Fri, 2 Feb 2001 10:02:37 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f12F0Xb20497; Fri, 2 Feb 2001 07:00:33 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f12F0as12441; Fri, 2 Feb 2001 07:00:36 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 07:00:36 -0800 (PST) From: Subject: Buying a home? Self employed? Hard to qualify? 1290 Date: Wed, 31 Jan 2001 20:53:44 Message-Id: <233.848736.870403@aol.com> Reply-To: homeloan013101@aol.com Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"JqAwQ.A.HCD.Tuse6"@glacier> To: ietf-ldapext@netscape.com Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com WE SOLVE MORTGAGE PROBLEMS !!! Specializing in loans for exceptional people Self-Employed Borrowers No Income or Asset Verification All Levels of Credit Quality Up to 100% Financing High Debt Ratios Non-Owner Occupied Properties Renovation Plus Purchase and Refinance $UPER $OLUTION$ ......... $UPER RE$ULT$ If you would like additional information please email us at wed1111@excite.com?Subject=MoreInformation Help a family member or a friend with their home loan needs by FORWARDING THIS EMAIL TO THEM! An Equal Housing Opportunity Lender If you wish to be removed from this advertiser's future mailings, please reply with the subject "Remove" and this software will automatically block you from their future mailings. From list@netscape.com Fri Feb 2 12:21:37 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA16694 for ; Fri, 2 Feb 2001 12:21:36 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f12HJWb13494; Fri, 2 Feb 2001 09:19:32 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f12HJVk22336; Fri, 2 Feb 2001 09:19:31 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 09:19:31 -0800 (PST) From: spygear@china.com Message-Id: <200102021704.BAA04154@netcenter.zjmc.edu.cn> Date: Thu, 01 Feb 01 08:57:19 EST To: Friend@public.com Subject: Internet Spy Software !!!!! Resent-Message-ID: <"uezKiC.A.vbF.gwue6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com READY TO KNOW? CONFIDENTIAL! The SOFTWARE They Want BANNED In all 50 STATES. Why? Because these secrets were never intended to reach your eyes... Get the facts on anyone! Locate Missing Persons, find Lost Relatives, obtain Addresses and Phone Numbers of old school friends, even Skip Trace Dead Beat Spouses. This is not a Private Investigator, but a sophisticated SOFTWARE program DESIGNED to automatically CRACK YOUR CASE with links to thousands of Public Record databases. Find out SECRETS about your relatives, friends, enemies, and everyone else! Even your spouse! With the New, INTERNET SPY AND YOU! It's absolutely astounding! Here's what you can learn. License plate number! Get anyone's name and address with just a license plate number! (Find that girl you met in traffic!) Driving record! Get anyone's driving record! Social security number! Trace anyone by social security number! Address! Get anyone's address with just a name! Unlisted phone numbers! Get anyone's phone number with just a name even unlisted numbers! Locate! Long lost friends, relatives, a past lover who broke your heart! E-mail! Send anonymous e-mail completely untraceable! Dirty secrets! Discover dirty secrets your in-laws don't want you to know! Investigate anyone! Use the sources that private investigators use (all on the Internet) secretly! Ex-spouse! Learn how to get information on an ex-spouse that will help you win in court! (Dig up old skeletons)! Criminal search Background check! Find out about your daughter's boyfriend! Find out! If you are being investigated! Neighbors! Learn all about your mysterious neighbors! Find out what they have to hide! People you work with! Be astonished by what you'll learn about people you work with! Education verification! Did he really graduate college? Find out! Internet Spy and You! Software will help you discover ANYTHING about anyone, with clickable hyperlinks and no typing in internet addresses! Just insert the floppy disk and Go! You will be shocked and amazed by the secrets that can be discovered about absolutely everyone! Find out the secrets they don't want you to know! About others, about yourself! It's INCREDIBLE what you can find out using Internet Spy and You and the Internet! You'll be riveted to your computer screen! Get the software they're trying to ban! Before it's too late! LIMITED TIME OFFER ORDER TODAY! Only $25.00 We will RUSH YOU our Internet Spy and You SOFTWARE so you can begin discovering all the secrets you ever wanted to know! You can Know EVERYTHING about ANYONE with our Internet Spy and Your Software. Works with all browsers and all versions of AOL! ORDER TODAY. SEND ONLY $25.00 US CASH, CHECK, OR CREDIT CARD (you may also send one of your own address labels for accuracy if you have one). Foreigh money orders must be payable on a US BANK AND IN US FUNDS! NO EXCEPTIONS! DON'T WAIT TO GET STARTED...It's as easy as 1, 2, 3. STEP 1 - Print the order form text below. STEP 2 - Type or print your order information into the order form section. STEP 3 - Mail order form and payment to the address below. Send to: Information Factory PO BOX 795 North Platte, Ne 69103 U.S.A. Name: ________________________________________ Address: ________________________________________ City/State/Zip: ______________________________________ FOR CREDIT CARD ORDERS ONLY CALL! 1-308-650-5905 this number is for credit card orders only !!!!! Account Number: ____________________________________ Exp. Date: ________________________ DISCLAIMER: The seller of this powerful software resource will not be held responsible for how the purchaser chooses to use it's resources. Thank you ****************Remove Instructions******************** ******************************************************** To be removed from future mailings!!!! All REMOVE requests AUTOMATICALLY honored upon receipt. mailto:exitnow12@yahoo.com?subject=REMOVE PLEASE understand that any effort to disrupt, close or block this REMOVE account can only result in difficulties for others wanting to be removed from our mailing list as it will be impossible to take anyone off the list if the remove instruction is not received. ******************************************************* From list@netscape.com Fri Feb 2 14:44:31 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA24309 for ; Fri, 2 Feb 2001 14:44:31 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f12JgAG19347; Fri, 2 Feb 2001 11:42:11 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f12JgBE07572; Fri, 2 Feb 2001 11:42:11 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 11:42:11 -0800 (PST) Date: Fri, 2 Feb 2001 11:42:01 -0800 (PST) Message-Id: <200102021942.f12Jg1Z09658@xwing.netscape.com> From: bizop4u To: bizopseeker@netscape.com Subject: Would $500 Change Your Situation? -XEUG X-Reply-To: bizop Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"jXYRWD.A.x1B.R2we6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Need a quick $100 today? Need a quick $500 this week? Need to QUICKLY build a $5,000 monthly income? This may be the most COMMON SENSE email you've ever read because I'm gonna show you EXACTLY how I got SICK AND TIRED of all the stupid chain letters, MLM's and mathematically impossible matrix deals, and started making all the money I needed, right from my home computer. I'm gonna show you EXACTLY how I get money deposited RIGHT to MY bank account (no company to hold my money while they "work things out"), and EXACTLY what I do every single day. This is for normal, hardworking people who want to make a steady, substantial and growing income from their computers, and to start making money today. You DON'T need a website. You DON'T need to "recruit" anyone. You DON'T need to talk to anyone. And... you DON'T even need to pay until YOU see that it works for YOU! I'm not kidding you when I tell you that you can have a perfectly legal and legitimate home based business that starts earning you money RIGHT AWAY, and that provides a STEADY and GROWING income - as much as you want to make! I'm gonna give you the tools to make this an automated thing, so you can be earning money whether you're at your computer or not! Believe me when I tell you that this very simple system took me from worrying about bills to having fun shopping in less than a week! Are YOU sick of it all yet? Do YOU need a QUICK income? Do YOU want control of your OWN money? Simply send me a blank email to internetbizop4u@autosenders.com and an autoresponder will immediately send you back the very simple and straightforward explanation of how YOU can do what I've done. Then you can decide if it's something you can do. But don't kid yourself. You have to do SOMETHING different, right? What if I'm telling the truth? (And I can prove that I am?) send a blank email to internetbizop4u@autosenders.com and see for yourself ------------------------------------------------------------------------------------------------------------------------------- FREE ISP? NO BANNERS? NO VIEW BARS? IS IT POSSIBLE? Not only is it possible but they pay you too! http://www.goingplatinum.com/member/tammij97303 ------------------------------------------------------------------------------------------------------------------------------- I get 200 to 500 Pre-Qualified LEADS right in my mailbox everyday. A revelutionary concept, yet so SIMPLE. And I have made THOUSANDS in profits just using these EMAIL LEADS! DAILY TARGETED LEADS NETWORK! The name says it all! Check it out: http://www.dailytargetedleads.com/members/tammij -------------------------------------------------------------------------------------------------------------------------------- To be remove, reply to this message with remove in the subject. From list@netscape.com Fri Feb 2 14:55:29 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA24862 for ; Fri, 2 Feb 2001 14:55:29 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f12JrLb26749; Fri, 2 Feb 2001 11:53:21 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f12JrLU13065; Fri, 2 Feb 2001 11:53:21 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 11:53:21 -0800 (PST) Message-ID: <3A7B0F90.E382AE6B@loudcloud.com> Date: Fri, 02 Feb 2001 11:50:40 -0800 From: Gordon Good X-Mailer: Mozilla 4.76 [en]C-{C-UDP; EBM-SONY1} (Win95; U) X-Accept-Language: en MIME-Version: 1.0 To: Jim Sermersheim CC: ietf-ldapext@netscape.com, howes@loudcloud.com, mcs@netscape.com, robw@worldspot.com Subject: Re: Another Persistent Search question References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"2lAtQB.A.1LD.wAxe6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit In the Netscape implementation, I'm fairly sure that an entry is only returned to the client if it matched the query after mods were applied. So, for example, if the psearch used a filter of "foo=bar" and the modification changes the "foo" attribute from "bar" to "baz" then no entry would be returned. However, for the delete operation, the entry that was deleted is returned. To summarize: If optype is ADD, a result is returned to the client iff the new entry matches the psearch criteria If optype is MODIFY, a result is returned to the client iff the entry matches the psearch criteria after modifications have been applied If optype is DELETE, a result is returned to the client iff the entry matches the psearch criteria prior to removal If optype is MODRDN, a result is returned to the client iff the entry matches the psearch criteria after being renamed That's from memory, but I'm pretty certain it reflects reality. There's an inconsistency there: you can detect when an entry leaves the result set for delete operations, but not for modify or modrdn operations. I'm not sure it's worth fixing that in the psearch document, but it should definitely be addressed by the LCUP work (and I'll bet LCUP addresses this already). -Gordon Jim Sermersheim wrote: > It's not clear whether or not entries are returned that do not match the search criteria. Most confusing is 4.c. It says that: > As changes are made to the server, the effected entries MUST be > returned to the client if they match the standard search cri- > teria and if the operation that caused the change is included in > the changeTypes field. The changeTypes field is the logical OR > of one or more of these values: add (1), delete (2), modify (4), > modDN (8)." > > If an entry was deleted, it no longer matches the search criteria. I believe the intent of the authors here is to have that entry returned. > > If an entry is modified or renamed, it may cause it to leave the original result set of the search criteria. I don't know whether or not the authors intended these entries to be returned. If they are returned, there are cases that would be difficult for the client to determine if the entry still belongs in the result set. > > Can someone clear this up? > > Thanks. Jim From list@netscape.com Fri Feb 2 15:50:35 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id PAA27610 for ; Fri, 2 Feb 2001 15:50:35 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f12KluG00815; Fri, 2 Feb 2001 12:47:57 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f12KlvY08486; Fri, 2 Feb 2001 12:47:57 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 12:47:57 -0800 (PST) Sender: mcs@netscape.com (Mark C Smith) Message-ID: <3A7B1C14.13136A37@netscape.com> Date: Fri, 02 Feb 2001 15:44:04 -0500 From: Mark Smith Organization: iPlanet E-Commerce Solutions X-Mailer: Mozilla 4.75 [en] (X11; U; SunOS 5.8 sun4u) X-Accept-Language: en-US, en MIME-Version: 1.0 To: Gordon Good CC: Jim Sermersheim , ietf-ldapext@netscape.com, howes@loudcloud.com, robw@worldspot.com Subject: Re: Another Persistent Search question References: <3A7B0F90.E382AE6B@loudcloud.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"J4PMpB.A.BEC.7zxe6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Gordon Good wrote: > > In the Netscape implementation, I'm fairly sure that an entry is only returned > to the client if it matched the query after mods were applied. > > So, for example, if the psearch used a filter of "foo=bar" and the modification > changes the "foo" attribute from "bar" to "baz" then no entry would be returned. > > However, for the delete operation, the entry that was deleted is returned. > > To summarize: > If optype is ADD, a result is returned to the client iff the new entry matches the psearch criteria > If optype is MODIFY, a result is returned to the client iff the entry matches the psearch criteria after modifications have been applied > If optype is DELETE, a result is returned to the client iff the entry matches the psearch criteria prior to removal > If optype is MODRDN, a result is returned to the client iff the entry matches the psearch criteria after being renamed > > That's from memory, but I'm pretty certain it reflects reality. Yes, I agree. This should be documented in the psearch document so people who choose to use it or implement it do so the same way. I will add this to the psearch draft soon. > > There's an inconsistency there: you can detect when an entry leaves the result > set for delete operations, but not for modify or modrdn operations. I'm not sure > it's worth fixing that in the psearch document, but it should definitely be > addressed by the LCUP work (and I'll bet LCUP addresses this already). It is being looked at. See section 5.1 of http://www.ietf.org/internet-drafts/draft-natkovich-ldap-lcup-02.txt -- Mark Smith Directory Product Development / Netscape From list@netscape.com Fri Feb 2 15:52:45 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id PAA27944 for ; Fri, 2 Feb 2001 15:52:44 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f12KoUb09991; Fri, 2 Feb 2001 12:50:30 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f12KoTo10270; Fri, 2 Feb 2001 12:50:29 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 12:50:29 -0800 (PST) Sender: mcs@netscape.com (Mark C Smith) Message-ID: <3A7B1D90.134659EE@netscape.com> Date: Fri, 02 Feb 2001 15:50:24 -0500 From: Mark Smith Organization: iPlanet E-Commerce Solutions X-Mailer: Mozilla 4.75 [en] (X11; U; SunOS 5.8 sun4u) X-Accept-Language: en-US, en MIME-Version: 1.0 To: "Kurt D. Zeilenga" CC: Jim Sermersheim , ietf-ldapext@netscape.com Subject: Re: Persistent Search questions References: <5.0.2.1.0.20010130151824.00a86c10@router.boolean.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"hhkfmC.A.MgC.V2xe6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit "Kurt D. Zeilenga" wrote: > > At 03:20 PM 1/30/01 -0700, Jim Sermersheim wrote: > >The persistent search control (draft-ietf-ldapext-psearch-03.txt) states in section 3 that the search operation is modified in such a way that the searcResultDone message is never sent. > > I would rather the spec state the operation never returns success, > but may return non-success result codes. This would, amongst other > things, allow the operation to be canceled (the cancel operation > cannot cancel an operation which has no response). I agree -- the statement as it stands in the current psearch draft is much stronger than it needs to be. > > >This implies that the size and time limits are ignored, but it's not explicitly stated. Can anyone confirm if this is the case? > > I would rather size/time limits not be ignored in face of this control. This is an interesting issue. I am fairly sure that the Netscape/iPlanet server's implementation does ignore size and time limits for entries that are returned as change notifications. This should be discussed in the PS draft. > > >Also, there is a little blurb in the security considerations section about making sure access controls are checked for entries being returned. This is more of a question to other implementors, a server could: > >a) check access control information once at the beginning of the search, and use that information without refreshing it later (could speed response time, and "fix" authorization to a specific view, or it could > >b) recalculate access control information everytime an entry is to be returned (provides consistency over long persistent search sessions). > > > >My feeling is that b is better, does anyone expect a? > > I'd prefer not to mandate either a nor b as what is best > is likely application/implementation specific. I would > note that in our implementation, b) would likely be much > easier to implement but I'd hate to wish b) on everyone. > Likewise for a). Maybe, but it seems safer and more consistent to me to require behavior b). This should at least be discussed in the security considerations section of the spec. -- Mark Smith Directory Product Development / Netscape I speak only for myself. From list@netscape.com Fri Feb 2 15:53:52 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id PAA28034 for ; Fri, 2 Feb 2001 15:53:52 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f12Kpfb10640; Fri, 2 Feb 2001 12:51:41 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f12Kpfw11556; Fri, 2 Feb 2001 12:51:41 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 12:51:41 -0800 (PST) Sender: mcs@netscape.com (Mark C Smith) Message-ID: <3A7B1DD7.919BA4CE@netscape.com> Date: Fri, 02 Feb 2001 15:51:35 -0500 From: Mark Smith Organization: iPlanet E-Commerce Solutions X-Mailer: Mozilla 4.75 [en] (X11; U; SunOS 5.8 sun4u) X-Accept-Language: en-US, en MIME-Version: 1.0 To: Jim Sermersheim CC: ietf-ldapext@netscape.com, Kurt@openldap.org Subject: Re: Persistent Search questions References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"DZps2B.A.L0C.c3xe6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit I agree that it would be useful to add some text to the PS document regarding interactions with other controls. I will do so. -- Mark Smith Directory Product Development / Netscape I speak only for myself. Jim Sermersheim wrote: > > cute, Kurt. > > seriously though, the psearch draft should probably have an "interaction with > other controls" just to make sure ppl think about this kind of thing. > > >>> "Kurt D. Zeilenga" 1/30/01 6:57:18 PM >>> > In regards to DoS attacks, seems you could really drive a > server crazy by asking it to sort a persistent search. From list@netscape.com Fri Feb 2 16:02:33 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id QAA28352 for ; Fri, 2 Feb 2001 16:02:33 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f12L0Lb13181; Fri, 2 Feb 2001 13:00:21 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f12L0Lg15636; Fri, 2 Feb 2001 13:00:21 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 13:00:21 -0800 (PST) Sender: mcs@netscape.com (Mark C Smith) Message-ID: <3A7B1FE0.60A9B7DA@netscape.com> Date: Fri, 02 Feb 2001 16:00:16 -0500 From: Mark Smith Organization: iPlanet E-Commerce Solutions X-Mailer: Mozilla 4.75 [en] (X11; U; SunOS 5.8 sun4u) X-Accept-Language: en-US, en MIME-Version: 1.0 To: "Kurt D. Zeilenga" CC: ietf-ldapext@netscape.com Subject: Re: psearch, search references, aliases References: <5.0.2.1.0.20010130180034.00a81810@router.boolean.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"7PjZFB.A.C0D.k_xe6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit "Kurt D. Zeilenga" wrote: > > What is the behavior of the psearch operation when, in the absence > of ManageDsaIt, there are subordinate references (in scope) > are added, deleted, or modified? This is not specified in the draft of course. On the surface, it seems reasonable for the server to make some effort to respect the ManageDSAIT setting. On the other hand, it would be a bit messy to return a continuation reference that has an EntryChangeNotification control attached to it. I believe the Netscape/iPlanet implementation acts as if ManageDSAIT were always present when returning entries in response to changes. > What is the behavior of the psearch operation when there are > aliases within scope and dereferencing during searching is > enabled? I will have to think about this one some more. What are your thoughts? -- Mark Smith Directory Product Development / Netscape I speak only for myself. From list@netscape.com Fri Feb 2 16:27:49 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id QAA29697 for ; Fri, 2 Feb 2001 16:27:48 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f12LOQb19290; Fri, 2 Feb 2001 13:24:26 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f12LOQY27924; Fri, 2 Feb 2001 13:24:26 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 13:24:26 -0800 (PST) Message-Id: <5.0.2.1.0.20010202130451.00a8eba0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Fri, 02 Feb 2001 13:23:55 -0800 To: Mark Smith From: "Kurt D. Zeilenga" Subject: Re: psearch, search references, aliases Cc: ietf-ldapext@netscape.com In-Reply-To: <3A7B1FE0.60A9B7DA@netscape.com> References: <5.0.2.1.0.20010130180034.00a81810@router.boolean.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"Ln5EBB.A.C0G.JWye6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 04:00 PM 2/2/01 -0500, Mark Smith wrote: >I will have to think about this one some more. What are your thoughts? Well, I think psearch semantics needs to be simple. Dealing with aliases and references leads to complex semantics to which, even if we sorted on the server side semantics, might not be all that useful to the client. Hence, my suggestion is to require the server behave as if ManageDsaIT was provided and require the client to specify either "never" or "finding" alias dereferencing. Kurt From list@netscape.com Fri Feb 2 16:41:34 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id QAA00379 for ; Fri, 2 Feb 2001 16:41:34 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f12LdIG11249; Fri, 2 Feb 2001 13:39:18 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f12LdJA07108; Fri, 2 Feb 2001 13:39:19 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 13:39:19 -0800 (PST) Date: Fri, 2 Feb 2001 13:38:37 -0800 (PST) Message-Id: <200102022138.f12LcbZ15159@xwing.netscape.com> From: akuag@GRIV.yahoo.com To: .LTUU@netscape.com Subject: Free Master Gold Card, get $20 for each referral. -IQUF X-Reply-To: hoo_ing@yahoo.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"xpKQnB.A.wuB.Gkye6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Hello, This is just a one time mail. You would never receive this mail again. Check this out! It's Master card this time, it pays better than Visa. To signup free, visit http://www.replicate99.com/BOSA2001/1103.shtm Start referring to your friends using this format until you get your ID. Each member that you refer and receive their card will make you USD20 each. Commission pays up to 12 level deep. It's free to apply. No annual fees. It's very new act quickly. regards, Hoo Ing Hi Marketing Friend, This is new. Free mastergold card. This program is INTERNATIONAL! All information can be found on the site at: http://www.replicate99.com/BOSA2001/1103.shtml GUARANTEED CARD APPROVAL No Credit or Bad Credit? It Doesn't Matter! MEMBERSHIP HAS ITS PRIVILEGES No Credit Checks! 0% A.P.R. EVERYONE QUALIFIES No Social Insurance Number No Income Verification Bankruptcy "OK" Private and Convenient BUY FOR FREE . . . . * Your commissions and bonus' could easily exceed your minimum payment from purchases * MAKE NO PAYMENTS! Every time someone who you have sponsored makes a payment on their MASTERGOLD Card account you'll actually receive percentage of the payment as a credit towards your own account. Receive enough credits and you won't have to make any payments. For more information visit BOSA2001/MASTERGOLD at: l GET IN THE TOP OF THE COMPANY NOW! You may join our pre-built downline (FREE), your card can be sent to you when we have reached 50,000 members. We have expectations of millions worldwide. You will receive $20 for every person who receives a credit card that you refer to the program (everyone is approved) and a Matrix pay-out 12 deep. From list@netscape.com Fri Feb 2 16:45:02 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id QAA00501 for ; Fri, 2 Feb 2001 16:45:01 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f12LguG12474; Fri, 2 Feb 2001 13:42:57 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f12LgvY09957; Fri, 2 Feb 2001 13:42:57 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 13:42:57 -0800 (PST) X-Mailer: Message-Id: To: jumpto@infospacemail.com Date: Fri, 02 Feb 2001 13:42:16 -0800 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 8BIT From: tilendo@fsmail.net Subject: GET LOANS UP TO $1,000,000 Bad Credit OK! Resent-Message-ID: <"aqoKwC.A.HbC.gnye6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8BIT catalyst_mortgage

Mortgage Services 4 You

Helping To Make Your Dreams Come True

What are your immediate dreams? Do you want to Refinance your existing loan, purchase a new home, consolidate your bills, make home improvements or just want some extra cash for a vacation or to start a business? Whatever your needs we can help. It's easy to qualify and your loan review is FREE…

HOME IMPROVEMENT LOANS

                     DEBT CONSOLIDATION LOANS

                                                     REFINANCE LOANS

                                                                               CASH OUT LOANS

Qualifying is at your fingertips. Many of the NEW Loan Programs offer Home-Owners the ability to consolidate bills into ONE low monthly payment. Benefits of this type of loan include tax advantages and interest savings. Programs for Home-Owners only.

Pay off existing high-interest loans, credit cards, student loans, medical and personal bills. Purchase or payoff vehicles, motorcycles and RV's. Money for building pools, spas, decks, remodeling, tuition, weddings, vacations, business, or just about anything. Debt Consolidation, Home Improvement or Cash-Out Loans are available for qualified applicants. Re-finance your existing loan for a lower rate.

NO up-front fees, and in most cases approval is possible within 24 hours. CASH can be in your hands within a couple of weeks after approval.

Applying is EASY - just…  Click Here
From list@netscape.com Fri Feb 2 21:52:15 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id VAA11430 for ; Fri, 2 Feb 2001 21:52:14 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f132nRG15691; Fri, 2 Feb 2001 18:49:28 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f132nTU01955; Fri, 2 Feb 2001 18:49:29 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 18:49:29 -0800 (PST) Message-ID: <000035ee63fa$00006bd8$000068c5@mis.trebley.com> To: From: bigjoe@japan.com Subject: Brand New E-Mail pager for FR-EE! 26821 Date: Fri, 02 Feb 2001 20:40:02 -0600 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal Reply-To: bigjoe@japan.com Resent-Message-ID: <"ow9H9.A.Pe.4G3e6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Accessmate E-Mail display pager. This is the top of the line PCS technology pager made today. This side viewable display pager has a retail value of $189.00and comes with its own e-mail address so you can receive your e-mails as well as alpha-numeric and numeric messages instantly where ever you are. Your new e-mail pager has features like 50,000 character memory, message time stamping, automatic garbled message correction, beeps or vibrates, incandescent backlight, saved message folder, a unique never out of range feature that allows your pager to retrieve messages sent earlier when your pager was out of range or turned completely off. You can also receive weather, news and sports .The Motorola e-mail pager is very small and uses only a single double A battery. All we ask before we ship you your Free pager is for you to allow us to provide the airtime for you. There is no long term contract or credit check. Airtime is month to month and can be cancelled at any time. This pager will comes pre-programmed with its own e-mail address as well as a local telephone number to receive numeric pages. This pager comes with a complete 30 day money back guarantee, if after receiving this pager you're not completely happy, send it back and receive a full refund. For immediate delivery call Paging America at toll free at 877-699-8546 Brand New E-Mail pager for FREE! No long term contract No activation fee No big prepayment of airtime No credit check PAGING AMERICA is going to give you absolutely Free the Brand new Motorola From list@netscape.com Fri Feb 2 22:19:53 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id WAA12092 for ; Fri, 2 Feb 2001 22:19:52 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f133HmG19319; Fri, 2 Feb 2001 19:17:48 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f133HnA09995; Fri, 2 Feb 2001 19:17:49 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 19:17:49 -0800 (PST) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.5.1 Date: Fri, 02 Feb 2001 20:17:01 -0700 From: "Jim Sermersheim" To: , Cc: Subject: Re: psearch, search references, aliases Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id f133Hmv09969 Resent-Message-ID: <"3hvxtD.A.3bC.ch3e6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit Kurt's suggestions make implementation much more simple--I vote yes. If we do restrict the search operation deref field to never or finding, there should be a discussion of what the server does in the event that a client sends always or searching. Jim >>> "Kurt D. Zeilenga" 2/2/01 2:23:55 PM >>> At 04:00 PM 2/2/01 -0500, Mark Smith wrote: >I will have to think about this one some more. What are your thoughts? Well, I think psearch semantics needs to be simple. Dealing with aliases and references leads to complex semantics to which, even if we sorted on the server side semantics, might not be all that useful to the client. Hence, my suggestion is to require the server behave as if ManageDsaIT was provided and require the client to specify either "never" or "finding" alias dereferencing. Kurt From list@netscape.com Fri Feb 2 22:24:58 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id WAA12309 for ; Fri, 2 Feb 2001 22:24:58 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f133N3G20326; Fri, 2 Feb 2001 19:23:03 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f133N5g12363; Fri, 2 Feb 2001 19:23:05 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 19:23:05 -0800 (PST) Message-Id: <5.0.2.1.0.20010202192152.00a92bc0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Fri, 02 Feb 2001 19:22:14 -0800 To: "Jim Sermersheim" From: "Kurt D. Zeilenga" Subject: Re: psearch, search references, aliases Cc: , In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"RrWHF.A.5AD.Xm3e6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 08:17 PM 2/2/01 -0700, Jim Sermersheim wrote: >Kurt's suggestions make implementation much more simple--I vote yes. If we do restrict the search operation deref field to never or finding, there should be a discussion of what the server does in the event that a client sends always or searching. protocolError From list@netscape.com Sat Feb 3 01:03:12 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id BAA17359 for ; Sat, 3 Feb 2001 01:03:10 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1360rb22956; Fri, 2 Feb 2001 22:00:53 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1360sA14583; Fri, 2 Feb 2001 22:00:54 -0800 (PST) Resent-Date: Fri, 2 Feb 2001 22:00:54 -0800 (PST) Message-Id: <200102030600.f1360p500941@ywing.netscape.com> From: massiveresults@grotty.co.uk Subject: HOMEBASED BUSINESS FOR GROWN-UPS! Date: Fri, 02 Feb 2001 19:49:37 -0700 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_4346_000035B0.0000702E" X-Priority: 3 X-MSMail-Priority: Normal Resent-Message-ID: <"pbTGuB.A.QjD.V65e6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com ------=_NextPart_000_4346_000035B0.0000702E Content-Type: text/html; Date: Fri, 02 Feb 2001 20:55:47 -0700 Message-Id: Let's get right to the point.

I am looking for positive motivated people that want and need to
earn a minimum of $10,000 per month.

 THIS ENTERPRISE WAS FEATURED IN TYCOON MAGAZINE!
Do you have a burning desire to change the quality of your existing
life?

Would you like to live the life that others only dream of?

If you think this is to good to be true or are skeptical then this
may not be for you...Many have been conditioned to believe it must
be illegal, immoral or unethical to ever earn any real profits
from our efforts.

The fact is we have many people in our enterprise that earn over
50k per month from the privacy of their own home and are retiring
in 2-3 yrs obviously wealthy and having total freedom both personal
and financial.

How would you like to:
1.Drastically reduce personal, business and capitol gains taxes?
2.Protect all assets from any form of seizure, liens, or judgments?
3.Create a six figure income every 4 Months?

How about:
1.Restoring and preserving complete personal and financial privacy?
2.Create and amass personal wealth, multiply it and protect it?
3.Realize a 3 to 6 times greater returns on your money?
4. Legally make yourself and your assets completely judgment-proof,
seizure-proof, lien-proof, divorce-proof, attorney-proof, IRS-proof and
become completely insulated?

Are you a BIG thinker, BIG dreamer and a person that believes they
deserve to have the best in life?

Are you capable of recognizing that once in a lifetime opportunity
when it's looking right at you?

Countless others have missed their shot at the title only to look
back years later and wished they should've because they could've.

If you are serious about changing your life...

 Call toll free 1-800-330-0810 (24 hr 2 min. message)
HIGH INTEGRITY! NOT MLM

Best regards
If you do what others won't
for the next 24 months.....
You'll do what others cannot
for the rest of your life.....
To provide Education & Leadership
To Elevate Consciousness Toward Individual
Freedom, Humanitarianism, and Prosperity..

To be removed reply to: movemeplease9@looksmart.com.au

------=_NextPart_000_4346_000035B0.0000702E-- From list@netscape.com Sat Feb 3 07:26:48 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id HAA01146 for ; Sat, 3 Feb 2001 07:26:47 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f13COoG18715; Sat, 3 Feb 2001 04:24:51 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f13COoE19623; Sat, 3 Feb 2001 04:24:50 -0800 (PST) Resent-Date: Sat, 3 Feb 2001 04:24:50 -0800 (PST) Date: Sat, 3 Feb 2001 04:24:19 -0800 (PST) Message-Id: <200102031224.f13COJ504869@ywing.netscape.com> From: akuag@VFCY.yahoo.com To: .SKMD@netscape.com Subject: Free Master Gold Card, get $20 for each referral. -CCSM X-Reply-To: hoo_ing@yahoo.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"beprYD.A.TyE.Ri_e6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Hello, This is just a one time mail. You would never receive this mail again. If you receive a duplicate mail from us, please leave it along, it was our mailing mistake. Check this out! It's Master card this time, it pays better than Visa. To signup free, visit http://www.replicate99.com/BOSA2001/1103.shtm Start referring to your friends using this format until you get your ID. Each member that you refer and receive their card will make you USD20 each. Commission pays up to 12 level deep. It's free to apply. No annual fees. It's very new act quickly. regards, Hoo Ing From list@netscape.com Sun Feb 4 07:14:37 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id HAA08103 for ; Sun, 4 Feb 2001 07:14:37 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f14CCTb19492; Sun, 4 Feb 2001 04:12:30 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f14CCWI14613; Sun, 4 Feb 2001 04:12:32 -0800 (PST) Resent-Date: Sun, 4 Feb 2001 04:12:32 -0800 (PST) From: Subject: NEW! MASTERGOLD CARD - OFFSHORE ACCOUNT - Join FREE!!! Date: Sun, 4 Feb 2001 16:36:07 Message-Id: <65.331517.574677@server01> Resent-Message-ID: <"YldDxD.A.3jD.ucUf6"@glacier> To: ietf-ldapext@netscape.com Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com URGENT!! Hello, Very RAW - The Recruitment Is Fantastic! Don't Left Behind! This program is INTERNATIONAL GUARANTEED CARD APPROVAL No Credit or Bad Credit? It Doesn't Matter! Get an Offshore Account has its Advantage! MEMBERSHIP HAS ITS PRIVILEGES No Credit Checks! 0% A.P.R. EVERYONE QUALIFIES No Social Insurance Number No Income Verification Private and Convenient BUY FOR FREE . . . . * Your commissions and bonus' could easily exceed your minimum payment from purchases * MAKE NO PAYMENTS! Every time someone who you have sponsored makes a payment on their MASTERGOLD Card account you'll actually receive percentage of the payment as a credit towards your own account. Receive enough credits and you won't have to make any payments. GET IN THE TOP OF THE COMPANY NOW You may join our pre-built downline (FREE), your card can be sent to you when we have reached 50,000 members. We have expectations of millions worldwide. You will receive $20 for every person who receives a credit card that you refer to the program (everyone is approved) and a Matrix pay-out 10 deep. Hurry! Request for info! mailto:jona01@excite.com?subject=G_info pls! Give it a go there is nothing to lose !! Regards, ................................................................ .. **This is a one-time mailing. There is no need to remove yourself to stop further mailings. From list@netscape.com Sun Feb 4 10:51:50 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id KAA09318 for ; Sun, 4 Feb 2001 10:51:49 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f14Fnib28730; Sun, 4 Feb 2001 07:49:44 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f14FniM17543; Sun, 4 Feb 2001 07:49:44 -0800 (PST) Resent-Date: Sun, 4 Feb 2001 07:49:44 -0800 (PST) Date: Sun, 4 Feb 2001 07:49:41 -0800 (PST) Message-Id: <200102041549.f14Fnf514297@ywing.netscape.com> From: iwwnv@hotmail.com To: fuaup@Netfriends.netscape.com Reply-To: su2m@bigfoot.com Subject: Generate over $250,000 With ONLY 15 People TOTAL In Your Group! [uvllh] Resent-Message-ID: <"-j3Dn.A.1RE.WoXf6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com THIS IS ABOUT MONEY…and this is REAL IF YOU WANT IT… HOW AND WHERE TO GET IT NOW. Let me give you a little idea….SELLING PRODUCTS AND SERVICES HAVE BEEN WASTING YOUR TIME! And…I’M WILLING TO BET THEY HAVEN’T MADE YOU THE KIND OF MONEY YOU HAD HOPED FOR, EITHER… SO…I’m going to tell you a shocking concept that is going to rock your world! FORGET SELLING PRODUCTS AND SERVICES! FORGET ALL THE HYPE YOU’VE BEEN CONDITIONED TO BELIEVE…AND START SELLING PROFIT…AS IN $$$ Sell 3 who Sell 2 and follow you through an incredible money-making system…. And YOU pocket a MINIMUM $33,705 NET….At The START…. FINANCING AVAILABLE – AND YOUR DOWNPAYMENT IS REBATED IN 30 DAYS!!!!!!!! No massive groups! Forget the BUILDING mentality we have all been brainwashed on, folks! We are talking about THREE PEOPLE HERE! THAT’S RIGHT…THREE PEOPLE WHO GET TWO PEOPLE (all can be with ZERO DOWN!) YOU GET $33,705! Not IN 12 MONTHS, NOT IN 6 MONTHS…IN 30 TO 60 DAYS! AND I’LL SHOW YOU HOW YOU CAN GENERATE A QUARTER OF A MILLION DOLLARS WITH ONLY 15 PEOPLE IN YOUR ENTIRE ORGANIZATION!!! THIS CAN AND WILL HAPPEN IN A VERY SHORT PERIOD OF TIME! There’s more!…starting with your 4th person, when they sell just 2 you earn a minimum $41,000 additional! THAT’S RIGHT, each person after your first three (each new person who gets only TWO) earns YOU a neat little $41K EACH! No Pie-In-Sky, No Maybe, No THEORIES and No If’s…No Start Ups! This is real and you must forget everything you’ve ever learned in MLM! You MUST be able to SELL THREE, or this won’t work (Come on! Who can’t sell THREE people on a proven system of making $33K in 30 to 60 days with a completely duplicatable system! If you can’t do this…you are in the wrong business…get a JOB!) Contact me when you’re ready to really make money that makes a difference! Reply with: MORE INFO-LET’S MAKE MONEY, as the subject. mailto:t3m1@bigfoot.com?subject=More_Info-Lets_Make_Money Please Note... Should this email address be down, Please "Fax" your response with your email address___, and the words "MORE INFO-LET’S MAKE MONEY" to: 305-425-3205. Looking forward for your response. Von From list@netscape.com Mon Feb 5 17:26:27 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA19324 for ; Mon, 5 Feb 2001 17:26:26 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f15MO3b20145; Mon, 5 Feb 2001 14:24:03 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f15MO4224348; Mon, 5 Feb 2001 14:24:04 -0800 (PST) Resent-Date: Mon, 5 Feb 2001 14:24:04 -0800 (PST) Mime-Version: 1.0 X-Sender: brent.holland@pop.openwave.com Message-Id: Date: Mon, 5 Feb 2001 14:21:43 -0800 To: ietf-ldapext@netscape.com From: Brent Holland Subject: Extensible Match Filters Content-Type: text/plain; charset="us-ascii" ; format="flowed" Resent-Message-ID: <"FxzQzD.A.K8F.Dgyf6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Is is possible for a LDAPV3 extensible match filter to contain an assertion value with Substring Assertion syntax in the form: ldapsearch (attr:dn:1.2.3.4.5.6.7:=*foo*bar*) The RFC's seem to be in conflict on this type of value production in the extensible filter: reference section 4.5.1 of RFC 2251, section 4 of RFC 2254, and section 8.3 of RFC 2252. brent.holland@openwave.com From list@netscape.com Mon Feb 5 19:56:21 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id TAA21447 for ; Mon, 5 Feb 2001 19:56:20 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f160sNb29624; Mon, 5 Feb 2001 16:54:24 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f160jDI07903; Mon, 5 Feb 2001 16:45:13 -0800 (PST) Resent-Date: Mon, 5 Feb 2001 16:45:13 -0800 (PST) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.5.1 Date: Mon, 05 Feb 2001 17:44:20 -0700 From: "Jim Sermersheim" To: , Cc: , , Subject: Re: Another Persistent Search question Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id f160irv07617 Resent-Message-ID: <"95wMI.A.d5B.Qk0f6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit One more issue regarding the delete operation. I'd like to propose that the entry being returned due to a delete operation MAY only include the DN and no attributes. The client doesn't care about the attribute values when an entry is deleted, and in some cases the implementation work is much simpler if only the DN is to be returned. Jim >>> Mark Smith 2/2/01 1:44:04 PM >>> Gordon Good wrote: > > In the Netscape implementation, I'm fairly sure that an entry is only returned > to the client if it matched the query after mods were applied. > > So, for example, if the psearch used a filter of "foo=bar" and the modification > changes the "foo" attribute from "bar" to "baz" then no entry would be returned. > > However, for the delete operation, the entry that was deleted is returned. > > To summarize: > If optype is ADD, a result is returned to the client iff the new entry matches the psearch criteria > If optype is MODIFY, a result is returned to the client iff the entry matches the psearch criteria after modifications have been applied > If optype is DELETE, a result is returned to the client iff the entry matches the psearch criteria prior to removal > If optype is MODRDN, a result is returned to the client iff the entry matches the psearch criteria after being renamed > > That's from memory, but I'm pretty certain it reflects reality. Yes, I agree. This should be documented in the psearch document so people who choose to use it or implement it do so the same way. I will add this to the psearch draft soon. > > There's an inconsistency there: you can detect when an entry leaves the result > set for delete operations, but not for modify or modrdn operations. I'm not sure > it's worth fixing that in the psearch document, but it should definitely be > addressed by the LCUP work (and I'll bet LCUP addresses this already). It is being looked at. See section 5.1 of http://www.ietf.org/internet-drafts/draft-natkovich-ldap-lcup-02.txt -- Mark Smith Directory Product Development / Netscape From list@netscape.com Tue Feb 6 03:16:19 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id DAA10090 for ; Tue, 6 Feb 2001 03:16:18 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f168EeG27549; Tue, 6 Feb 2001 00:14:40 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f168EfE19941; Tue, 6 Feb 2001 00:14:41 -0800 (PST) Resent-Date: Tue, 6 Feb 2001 00:14:41 -0800 (PST) Date: Tue, 6 Feb 2001 00:14:38 -0800 (PST) From: MSG@elnet.is Message-Id: <200102060814.f168EX509915@ywing.netscape.com> To: mike85g5z@hotmail.com Resent-Message-ID: <"_plMID.A.T3E.wJ7f6"@glacier> Resent-From: ietf-ldapext@netscape.com Subject: Unidentified subject! X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com lberta.ca, hartz.baptiste@mailcity.com, hstrauss@teleport.com, hamlin@gurlmail.com, hoffmann@gorbi.informatik.uni-dortmund.de, holtzclaw-associates@eudoramail.com, hernandor@aol.com From: Subject: LOWEST Merchant Rates / 99%+ Approval / FREE Website & FREE Hosting MIME-Version: 1.0 Content-Type: text/plain; charset=unknown-8bit content-length: 4419 Date: Tue, 6 Feb 101 03:11:23 EDT Complete Turnkey E-commerce Solutions ACCEPT Credit Cards, Debit Cards, & Checks NO Application Fee FREE Lifetime 100mb Ad Free Web Hosting [ $500/yr Value ] FREE Web Site Design LOWEST Guaranteed Rates 99% Approval Rate The credit and debit industry are constantly changing anticipating the demands of customers like you in order to provide the latest technology at the lowest price. Now is the time to take advantage of this by exploring your options. We have the ability to INCREASE your sales & LOWER your operating expenses. We can offer you the capabilities to have your own merchant account and accept all credit and debit cards, EBT, American Express, Discover, JCB, Diners Club and Check Guarantee/Conversion Services. We have the latest in technology at your service plus we offer the best in depth market studies for your business. Our spectrum of services include: COMPLETE TURNKEY E-COMMERCE WEBSITES INCLUDING: FREE Lifetime 100Mb Ad Free Web Hosting [ $500/yr value ] FREE Web Design Credit Card Merchant Account Acceptance Third Party Billing Online E-commerce Software Online Check And Debit Cards Acceptance Sub-Accounts Billing Solutions Fraud Scrubbing System Software AVS~Address Verification System >From terminals for your store to virtual terminals for your website, we can accommodate your needs FAST. Our expertise comes from 15 years in the credit and debit card industry and 7 years on the E-commerce, designing towards the future. We look forward to EARNING your business. Complete an application at no charge or obligation. You may call our customer service representatives toll free at 888.557.0538 or fax the application below toll free to 877.677.9908. Please do not reply to this message as it is an outbound message only. __________________________________________________ "¤"¥"¤"§"¤"¥"¤"§"¤"¥"¤"§"¤"¥"¤"§"¤"¥"¤"§"¤"¥"¤"§ ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ PLEASE PRINT ALL FIELDS CLEARLY & FAX TOLL FREE TO 877.677.9908. Business Name _____________________________________________ Street Address: _____________________________________________ City ______________________________________________ State, Zip ______________________________________________ Business Phone ______________________________________________ Business Fax ______________________________________________ Web Site Address ______________________________________________ Product / Service ______________________________________________ Tax Id #, If Any: ______________________________________________ Business Start Date ____________________________________________ Estimated Monthly Card Volume $_______________________________ Estimated Average Card Sale $_______________________________ What Percentage ( % ) Of Your Business Is Conducted Via: Mail/phone Order _________% Retail _________% Internet _________% Trade Show _________% What Is Your Credit Rating [ Please Circle ] : Excellent Fair Poor Contact Name _______________________________________ Social Security Number _______________________________________ E-mail Address _______________________________________ Phone Number _______________________________________ Place A Check By Which Service(s) Interest You _______ Real Time Processing With Virtual Terminal _______ Point Of Sale Terminal _______ Have My Own Processing Equipment _______ Purchase Terminal And / Or Establish Service _______ Lease Terminal And Establish Service _______ Unsure / Undecided PLEASE FAX THE APPLICATION ABOVE TOLL FREE TO 877.677.9908. __________________________________________________ "¤"¥"¤"§"¤"¥"¤"§"¤"¥"¤"§"¤"¥"¤"§"¤"¥"¤"§"¤"¥"¤"§ ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ This message has been brought to you by eActive as part of an opt-in list. Our relationship with you is very important to us. If you would prefer not to receive further messages from eActive in the future, you need do nothing. This is a one time e-mail transmission. Removal is automatic. From list@netscape.com Tue Feb 6 08:09:52 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id IAA12351 for ; Tue, 6 Feb 2001 08:09:51 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f16D89G18955; Tue, 6 Feb 2001 05:08:09 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f16D89k27901; Tue, 6 Feb 2001 05:08:09 -0800 (PST) Resent-Date: Tue, 6 Feb 2001 05:08:09 -0800 (PST) Message-Id: <200102061307.IAA12234@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ietf-ldapext@netscape.com From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-ldapext-ldap-java-api-13.txt Date: Tue, 06 Feb 2001 08:07:51 -0500 Sender: scoya@cnri.reston.va.us Resent-Message-ID: <"RXvjGC.A.rzG.4c_f6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the LDAP Extension Working Group of the IETF. Title : The Java LDAP Application Program Interface Author(s) : R. Weltman, C. Tomlinson, M. Kekic, S. Sonntag, J. Sermersheim, M. Smith, T. Howes Filename : draft-ietf-ldapext-ldap-java-api-13.txt Pages : 131 Date : 05-Feb-01 This document defines a Java language application program interface to the lightweight directory access protocol (LDAP), in the form of a class library. It complements but does not replace RFC 1823 ([7]), which describes a C language application program interface. It updates the previous draft in correcting a few minor errors which are listed in appendix B. It also includes the asynchronous layer of the API which was previously defined in draft-ietf-ldapext-ldap-java-api- asynch [10]. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ldapext-ldap-java-api-13.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ldapext-ldap-java-api-13.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ldapext-ldap-java-api-13.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20010205120501.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ldapext-ldap-java-api-13.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ldapext-ldap-java-api-13.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20010205120501.I-D@ietf.org> --OtherAccess-- --NextPart-- From list@netscape.com Tue Feb 6 10:50:25 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id KAA19016 for ; Tue, 6 Feb 2001 10:50:25 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f16FmYJ04062; Tue, 6 Feb 2001 07:48:34 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f16FmXA15629; Tue, 6 Feb 2001 07:48:33 -0800 (PST) Resent-Date: Tue, 6 Feb 2001 07:48:33 -0800 (PST) Message-ID: <3A801C34.3414AB4C@netscape.com> Date: Tue, 06 Feb 2001 10:45:56 -0500 From: mcs@netscape.com (Mark C Smith) Organization: iPlanet E-Commerce Solutions X-Mailer: Mozilla 4.75 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: Jim Sermersheim CC: ggood@loudcloud.com, howes@loudcloud.com, ietf-ldapext@netscape.com, robw@worldspot.com Subject: Re: Another Persistent Search question References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"1QZvhB.A.mzD.PzBg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Actually, in my experience a lot of clients DO care about attribute values other than the DN. Why? Because if they are using the change notification to keep some "cache" or related data store up to date, they may use something other than the DN to locate the related information in their cache. E.g., a mail server may use the mail attribute. -Mark Smith Netscape Jim Sermersheim wrote: > > One more issue regarding the delete operation. I'd like to propose that the entry > being returned due to a delete operation MAY only include the DN and no attributes. > The client doesn't care about the attribute values when an entry is deleted, and > in some cases the implementation work is much simpler if only the DN is to be returned. > > Jim > > >>> Mark Smith 2/2/01 1:44:04 PM >>> > Gordon Good wrote: > > > > In the Netscape implementation, I'm fairly sure that an entry is only returned > > to the client if it matched the query after mods were applied. > > > > So, for example, if the psearch used a filter of "foo=bar" and the modification > > changes the "foo" attribute from "bar" to "baz" then no entry would be returned. > > > > However, for the delete operation, the entry that was deleted is returned. > > > > To summarize: > > If optype is ADD, a result is returned to the client iff the new entry matches the psearch criteria > > If optype is MODIFY, a result is returned to the client iff the entry matches the psearch criteria after modifications have been applied > > If optype is DELETE, a result is returned to the client iff the entry matches the psearch criteria prior to removal > > If optype is MODRDN, a result is returned to the client iff the entry matches the psearch criteria after being renamed > > > > That's from memory, but I'm pretty certain it reflects reality. > > Yes, I agree. This should be documented in the psearch document so > people who choose to use it or implement it do so the same way. I will > add this to the psearch draft soon. > > > > > There's an inconsistency there: you can detect when an entry leaves the result > > set for delete operations, but not for modify or modrdn operations. I'm not sure > > it's worth fixing that in the psearch document, but it should definitely be > > addressed by the LCUP work (and I'll bet LCUP addresses this already). > > It is being looked at. See section 5.1 of > http://www.ietf.org/internet-drafts/draft-natkovich-ldap-lcup-02.txt > > -- > Mark Smith > Directory Product Development / Netscape From list@netscape.com Tue Feb 6 11:33:46 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id LAA21177 for ; Tue, 6 Feb 2001 11:33:45 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f16GVUb13452; Tue, 6 Feb 2001 08:31:30 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f16GVUs04365; Tue, 6 Feb 2001 08:31:30 -0800 (PST) Resent-Date: Tue, 6 Feb 2001 08:31:30 -0800 (PST) Message-Id: <5.0.2.1.0.20010206082354.00a806d0@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Tue, 06 Feb 2001 08:25:15 -0800 To: mcs@netscape.com (Mark C Smith), Jim Sermersheim From: Bruce Greenblatt Subject: Re: Another Persistent Search question Cc: ggood@loudcloud.com, howes@loudcloud.com, ietf-ldapext@netscape.com, robw@worldspot.com In-Reply-To: <3A801C34.3414AB4C@netscape.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"gllc3.A.7DB.hbCg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 10:45 AM 2/6/2001 -0500, Mark C Smith wrote: >Actually, in my experience a lot of clients DO care about attribute >values other than the DN. Why? Because if they are using the change >notification to keep some "cache" or related data store up to date, they >may use something other than the DN to locate the related information in >their cache. E.g., a mail server may use the mail attribute. I agree. It has been my experience that often the naming attribute is not what the LDAP enabled application is using internally to uniquely identify users. As Mark suggests, it is often the email address. Bruce >-Mark Smith > Netscape > > >Jim Sermersheim wrote: > > > > One more issue regarding the delete operation. I'd like to propose that > the entry > > being returned due to a delete operation MAY only include the DN and no > attributes. > > The client doesn't care about the attribute values when an entry is > deleted, and > > in some cases the implementation work is much simpler if only the DN is > to be returned. > > > > Jim > > > > >>> Mark Smith 2/2/01 1:44:04 PM >>> > > Gordon Good wrote: > > > > > > In the Netscape implementation, I'm fairly sure that an entry is only > returned > > > to the client if it matched the query after mods were applied. > > > > > > So, for example, if the psearch used a filter of "foo=bar" and the > modification > > > changes the "foo" attribute from "bar" to "baz" then no entry would > be returned. > > > > > > However, for the delete operation, the entry that was deleted is > returned. > > > > > > To summarize: > > > If optype is ADD, a result is returned to the client iff the new > entry matches the psearch criteria > > > If optype is MODIFY, a result is returned to the client iff the entry > matches the psearch criteria after modifications have been applied > > > If optype is DELETE, a result is returned to the client iff the entry > matches the psearch criteria prior to removal > > > If optype is MODRDN, a result is returned to the client iff the entry > matches the psearch criteria after being renamed > > > > > > That's from memory, but I'm pretty certain it reflects reality. > > > > Yes, I agree. This should be documented in the psearch document so > > people who choose to use it or implement it do so the same way. I will > > add this to the psearch draft soon. > > > > > > > > There's an inconsistency there: you can detect when an entry leaves > the result > > > set for delete operations, but not for modify or modrdn operations. > I'm not sure > > > it's worth fixing that in the psearch document, but it should > definitely be > > > addressed by the LCUP work (and I'll bet LCUP addresses this already). > > > > It is being looked at. See section 5.1 of > > http://www.ietf.org/internet-drafts/draft-natkovich-ldap-lcup-02.txt > > > > -- > > Mark Smith > > Directory Product Development / Netscape ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Tue Feb 6 12:03:51 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA22710 for ; Tue, 6 Feb 2001 12:03:50 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f16H1tJ16376; Tue, 6 Feb 2001 09:01:55 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f16H1sc25839; Tue, 6 Feb 2001 09:01:54 -0800 (PST) Resent-Date: Tue, 6 Feb 2001 09:01:54 -0800 (PST) X-MimeOLE: Produced By Microsoft Exchange V6.0.4633.0 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C08FB1.67675CD3" Subject: Updated Result Code for LDAP Controls draft - draft-armijo-ldap-control-error-01.txt Date: Mon, 5 Feb 2001 12:22:47 -0800 Message-ID: <96BABA22ECEAEA45B53D08D63E1B567852810C@DF-SPIKE.platinum.corp.microsoft.com> X-MS-Has-Attach: yes Thread-Topic: Fix for VLV draft. Thread-Index: AcCLGROcsWs4B438S2SvvtZVvf4hdgElpXlQ From: "Michael Armijo" To: X-OriginalArrivalTime: 06 Feb 2001 16:44:21.0573 (UTC) FILETIME=[0E2F0F50:01C0905C] Resent-Message-ID: <"GOMIS.A.wSG.A4Cg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a multi-part message in MIME format. ------_=_NextPart_001_01C08FB1.67675CD3 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Here is the updated version of the LDAP Control error draft. Please review and comment on the updated draft. I would like to pursue this being progressed as a PS ASAP so we can move forward on the VLV draft. thanks, Michael ------_=_NextPart_001_01C08FB1.67675CD3 Content-Type: text/plain; name="draft-armijo-ldap-control-error-01.txt" Content-Description: draft-armijo-ldap-control-error-01.txt Content-Disposition: attachment; filename="draft-armijo-ldap-control-error-01.txt" Content-Transfer-Encoding: base64 SU5URVJORVQtRFJBRlQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1p Y2hhZWwgUC4gQXJtaWpvDQo8ZHJhZnQtYXJtaWpvLWxkYXAtY29udHJvbC1lcnJvci0wMS50eHQ+ ICAgICAgICAgICBNaWNyb3NvZnQgQ29ycG9yYXRpb24gICAgICAgDQpGZWJydWFyeSwgMjAwMSAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDQpFeHBpcmVz OiBBdWd1c3QsIDIwMDEgICAgICAgICAgICAgICAgICAgICAgICAgICANCgkJCQkJCQ0KCQkJCQkJ DQogICAgICAgICAgICAgICBSZXN1bHQgQ29kZSBmb3IgTERBUCBDb250cm9scw0KDQpTdGF0dXMg b2YgdGhpcyBNZW1vDQoNCiAgIFRoaXMgZG9jdW1lbnQgaXMgYW4gSW50ZXJuZXQtRHJhZnQgYW5k IGlzIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aA0KICAgYWxsIHByb3Zpc2lvbnMgb2YgU2VjdGlv biAxMCBvZiBSRkMyMDI2Lg0KDQogICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdvcmtpbmcgZG9jdW1l bnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZw0KICAgVGFzayBGb3JjZSAoSUVURiksIGl0 cyBhcmVhcywgYW5kIGl0cyB3b3JraW5nIGdyb3Vwcy4gIE5vdGUgdGhhdA0KICAgb3RoZXIgZ3Jv dXBzIG1heSBhbHNvIGRpc3RyaWJ1dGUgd29ya2luZyBkb2N1bWVudHMgYXMgSW50ZXJuZXQtDQog ICBEcmFmdHMuDQoNCiAgIEludGVybmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1lbnRzIHZhbGlk IGZvciBhIG1heGltdW0gb2Ygc2l4IG1vbnRocw0KICAgYW5kIG1heSBiZSB1cGRhdGVkLCByZXBs YWNlZCwgb3Igb2Jzb2xldGVkIGJ5IG90aGVyIGRvY3VtZW50cyBhdCBhbnkNCiAgIHRpbWUuICBJ dCBpcyBpbmFwcHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC0gRHJhZnRzIGFzIHJlZmVyZW5jZQ0K ICAgbWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jl c3MuIg0KDQogICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LURyYWZ0cyBjYW4gYmUgYWNj ZXNzZWQgYXQNCiAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvaWV0Zi8xaWQtYWJzdHJhY3RzLnR4dA0K DQogICBUaGUgbGlzdCBvZiBJbnRlcm5ldC1EcmFmdCBTaGFkb3cgRGlyZWN0b3JpZXMgY2FuIGJl IGFjY2Vzc2VkIGF0DQogICBodHRwOi8vd3d3LmlldGYub3JnL3NoYWRvdy5odG1sLg0KDQogICBE aXN0cmlidXRpb24gb2YgdGhpcyBtZW1vIGlzIHVubGltaXRlZC4gIEl0IGlzIGZpbGVkIGFzIDxk cmFmdC0NCiAgIGFybWlqby1sZGFwLWNvbnRyb2wtZXJyb3ItMDEudHh0PiwgYW5kIGV4cGlyZXMg b24gQXVndXN0IDUsIDIwMDEuICANCiAgIFBsZWFzZSBzZW5kIGNvbW1lbnRzIHRvIHRoZSBhdXRo b3IuDQoNCg0KICAgQWJzdHJhY3QNCg0KICAgVGhlIHB1cnBvc2Ugb2YgdGhpcyBkb2N1bWVudCBp cyB0byBjcmVhdGUgYSBuZXcgcmVzdWx0IGNvZGUgc3BlY2lmaWMgDQogICB0byBMREFQIGNvbnRy b2xzIGFuZCB0byBkZWZpbmUgZ3VpZGVsaW5lcyBmb3IgdGhlIHVzZSBvZiB0aGlzIA0KICAgcmVz dWx0IGNvZGUuDQoNCg0KMS4gQmFja2dyb3VuZCBhbmQgSW50ZW5kZWQgVXNhZ2UNCg0KICAgTERB UHYzIFsxXSBhbGxvd3MgZm9yIHRoZSBleHRlbnNpb24gb2YgdGhlIHByb3RvY29sIHRocm91Z2gg dGhlIHVzZSANCiAgIG9mIGNvbnRyb2xzLiAgVGhlc2UgY29udHJvbHMgYWxsb3cgZXhpc3Rpbmcg b3BlcmF0aW9ucyB0byBiZSANCiAgIGVuaGFuY2VkIHRvIHByb3ZpZGUgYWRkaXRpb25hbCBmdW5j dGlvbmFsaXR5IGZvciBkaXJlY3RvcnkgDQogICBvcGVyYXRpb25zLiAgQ29tcGxleCBjb250cm9s cyBhcmUgYmVpbmcgZXN0YWJsaXNoZWQgdGhhdCBhcmUgDQogICBicmluZ2luZyB1cCBlcnJvciBj b25kaXRpb25zIG5vdCBhbnRpY2lwYXRlZCBpbiB0aGUgTERBUHYzIA0KICAgc3BlY2lmaWNhdGlv bnMuDQoNCiAgIFRoaXMgZG9jdW1lbnQgcHJvdmlkZXMgYSByZXN1bHQgY29kZSB0aGF0IGNhbiBi ZSB1c2VkIHRvIHNpZ25pZnkNCiAgIGEgY29udHJvbCBzcGVjaWZpYyBlcnJvci4NCg0KICAgVGhl IGtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJFRCIsICJTSEFMTCIsICJTSEFM TA0KICAgTk9UIiwgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwgIlJFQ09NTUVOREVEIiwgICJNQVki LCBhbmQNCiAgICJPUFRJT05BTCIgaW4gdGhpcyBkb2N1bWVudCBhcmUgdG8gYmUgaW50ZXJwcmV0 ZWQgYXMgZGVzY3JpYmVkIGluDQogICBSRkMgMjExOSBbMl0uDQoNCjIuIFRoZSBMREFQIENvbnRy b2wgUmVzdWx0IENvZGUNCg0KICAgVGhlIExEQVBSZXN1bHQgY29uc3RydWN0IGFzIGRlZmluZWQg aW4gc2VjdGlvbiA0LjEuMTAgb2YgDQogICBSRkMgMjI1MSBbMV0gaW5jbHVkZXMgYSBsaXN0IG9m IHZhbGlkIHJlc3VsdCBjb2Rlcy4gIFRoZSBMREFQUmVzdWx0DQogICBjb25zdHJ1Y3QgaXMgcmVw ZWF0ZWQgaGVyZSBmb3IgcmVhZGFiaWxpdHk6DQoNCg0KICAgTERBUFJlc3VsdCA6Oj0gU0VRVUVO Q0Ugew0KICAgICAgICAgICAgICAgIHJlc3VsdENvZGUgICAgICBFTlVNRVJBVEVEIHsNCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgc3VjY2VzcyAgICAgICAgICAgICAgICAgICAgICAoMCks DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgIG9wZXJhdGlvbnNFcnJvciAgICAgICAgICAg ICAgKDEpLA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICBwcm90b2NvbEVycm9yICAgICAg ICAgICAgICAgICgyKSwNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgdGltZUxpbWl0RXhj ZWVkZWQgICAgICAgICAgICAoMyksDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgIHNpemVM aW1pdEV4Y2VlZGVkICAgICAgICAgICAgKDQpLA0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBjb21wYXJlRmFsc2UgICAgICAgICAgICAgICAgICg1KSwNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgY29tcGFyZVRydWUgICAgICAgICAgICAgICAgICAoNiksDQoNCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgYXV0aE1ldGhvZE5vdFN1cHBvcnRlZCAgICAgICAoNyksDQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHN0cm9uZ0F1dGhSZXF1aXJlZCAgICAgICAgICAgKDgp LA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIDkgcmVzZXJ2ZWQg LS0NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcmVmZXJyYWwgICAgICAgICAgICAgICAg ICAgICAoMTApLCAgLS0gbmV3DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgIGFkbWluTGlt aXRFeGNlZWRlZCAgICAgICAgICAgKDExKSwgIC0tIG5ldw0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB1bmF2YWlsYWJsZUNyaXRpY2FsRXh0ZW5zaW9uICgxMiksICAtLSBuZXcNCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgY29uZmlkZW50aWFsaXR5UmVxdWlyZWQgICAgICAoMTMp LCAgLS0gbmV3DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgIHNhc2xCaW5kSW5Qcm9ncmVz cyAgICAgICAgICAgKDE0KSwgIC0tIG5ldw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICBu b1N1Y2hBdHRyaWJ1dGUgICAgICAgICAgICAgICgxNiksDQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgIHVuZGVmaW5lZEF0dHJpYnV0ZVR5cGUgICAgICAgKDE3KSwNCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgaW5hcHByb3ByaWF0ZU1hdGNoaW5nICAgICAgICAoMTgpLA0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBjb25zdHJhaW50VmlvbGF0aW9uICAgICAgICAgICgxOSks DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgIGF0dHJpYnV0ZU9yVmFsdWVFeGlzdHMgICAg ICAgKDIwKSwNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaW52YWxpZEF0dHJpYnV0ZVN5 bnRheCAgICAgICAoMjEpLA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IC0tIDIyLTMxIHVudXNlZCAtLQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICBub1N1Y2hP YmplY3QgICAgICAgICAgICAgICAgICgzMiksDQogICAgICAgICAgICAgICAgICAgICAgICAgICAg IGFsaWFzUHJvYmxlbSAgICAgICAgICAgICAgICAgKDMzKSwNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgaW52YWxpZEROU3ludGF4ICAgICAgICAgICAgICAoMzQpLA0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAtLSAzNSByZXNlcnZlZCBmb3IgdW5kZWZpbmVkIGlzTGVhZiAtLQ0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBhbGlhc0RlcmVmZXJlbmNpbmdQcm9ibGVtICAg ICgzNiksDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0gMzctNDcg dW51c2VkIC0tDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgIGluYXBwcm9wcmlhdGVBdXRo ZW50aWNhdGlvbiAgKDQ4KSwNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaW52YWxpZENy ZWRlbnRpYWxzICAgICAgICAgICAoNDkpLA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICBp bnN1ZmZpY2llbnRBY2Nlc3NSaWdodHMgICAgICg1MCksDQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgIGJ1c3kgICAgICAgICAgICAgICAgICAgICAgICAgKDUxKSwNCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgdW5hdmFpbGFibGUgICAgICAgICAgICAgICAgICAoNTIpLA0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICB1bndpbGxpbmdUb1BlcmZvcm0gICAgICAgICAgICg1Myks DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgIGxvb3BEZXRlY3QgICAgICAgICAgICAgICAg ICAgKDU0KSwNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSA1NS02 MyB1bnVzZWQgLS0NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgbmFtaW5nVmlvbGF0aW9u ICAgICAgICAgICAgICAoNjQpLA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICBvYmplY3RD bGFzc1Zpb2xhdGlvbiAgICAgICAgICg2NSksDQogICAgICAgICAgICAgICAgICAgICAgICAgICAg IG5vdEFsbG93ZWRPbk5vbkxlYWYgICAgICAgICAgKDY2KSwNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgbm90QWxsb3dlZE9uUkROICAgICAgICAgICAgICAoNjcpLA0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBlbnRyeUFscmVhZHlFeGlzdHMgICAgICAgICAgICg2OCksDQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgIG9iamVjdENsYXNzTW9kc1Byb2hpYml0ZWQgICAgKDY5 KSwNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSA3MCByZXNlcnZl ZCBmb3IgQ0xEQVAgLS0NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgYWZmZWN0c011bHRp cGxlRFNBcyAgICAgICAgICAoNzEpLCAtLSBuZXcNCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAtLSA3Mi03OSB1bnVzZWQgLS0NCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgb3RoZXIgICAgICAgICAgICAgICAgICAgICAgICAoODApIH0sDQogICAgICAgICAgICAg ICAgICAgICAgICAgICAgIC0tIDgxLTkwIHJlc2VydmVkIGZvciBBUElzIC0tDQogICAgICAgICAg ICAgICAgbWF0Y2hlZEROICAgICAgIExEQVBETiwNCiAgICAgICAgICAgICAgICBlcnJvck1lc3Nh Z2UgICAgTERBUFN0cmluZywNCiAgICAgICAgICAgICAgICByZWZlcnJhbCAgICAgICAgWzNdIFJl ZmVycmFsIE9QVElPTkFMIH0NCg0KIA0KDQogICBUaGlzIGRvY3VtZW50IGFkZHMgYW5vdGhlciB2 YWxpZCByZXN1bHQgY29kZSwgY29udHJvbEVycm9yKHgpLg0KDQogICANCg0KMy4gVXNlIG9mIHRo ZSBMREFQIENvbnRyb2wgUmVzdWx0IENvZGUNCiANCiAgIFRoZSBjb250cm9sRXJyb3IgcmVzdWx0 IGNvZGUgY2FuIGJlIHJldHVybmVkIHdoZW4gYW4gb3BlcmF0aW9uIA0KICAgaGFzIGZhaWxlZCBk dWUgdG8gYW4gZXJyb3IgY2F1c2VkIGJ5IGFuIGF0dGFjaGVkIGNvbnRyb2wuICBUaGUNCiAgIGNv bnRyb2xFcnJvciBTSE9VTEQgTk9UIGJlIHVzZWQgdG8gcmVwcmVzZW50IGFueSBjb25kaXRpb24g dGhhdCANCiAgIGNhbiBiZSBkZWZpbmVkIHVzaW5nIGFueSBleGlzdGluZyByZXN1bHQgY29kZSBp biBSRkMgMjI1MS4NCg0KICAgVGhlIGNvbnRyb2xFcnJvciBNVVNUIGJlIGRlZmluZWQgaW4gYW55 IGNvbnRyb2wgc3BlY2lmaWNhdGlvbiB0aGF0DQogICBtYWtlcyB1c2Ugb2YgdGhlIHJlc3VsdCBj b2RlLiAgVGhlIHNjZW5hcmlvIG9mIHdoZW4gdGhlIGNvbnRyb2xFcnJvciANCiAgIHJlc3VsdCBj b2RlIG1heSBiZSByZXR1cm5lZCBhbmQgdGhlIGV4YWN0IGJlaGF2aW9yIG9mIHRoZSBjbGllbnQg DQogICB3aXRoIHBhcnRpY3VsYXIgY29udHJvbHMgTVVTVCBiZSBkZWZpbmVkIGluIGFueSBjb250 cm9sIA0KICAgc3BlY2lmaWNhdGlvbiB0aGF0IHJlZmVycyB0byB0aGlzIHJlc3VsdCBjb2RlLg0K DQogICBUaGUgY29udHJvbEVycm9yIHJlc3VsdCBjb2RlIE1BWSBiZSBkZWZpbmVkIGluIGNvbnRy b2wgDQogICBzcGVjaWZpY2F0aW9ucyB0byBzaWduaWZ5IHRoYXQgdGhlIGNsaWVudCBzaG91bGQg cGFyc2UgYW4gZW1iZWRkZWQgDQogICByZXN1bHQgY29kZSBmb3IgYWRkaXRpb25hbCBjb250cm9s IHNwZWNpZmljIHJlc3VsdHMuDQoNCg0KNC4gU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMNCg0KICAg VGhpcyBkb2N1bWVudCBkZWZpbmVzIGFuIGV4dGVuc2lvbiB0byBSRkMgMjI1MSBbMV0gYW5kIGhh cyB0aGUgc2FtZSANCiAgIHNlY3VyaXR5IGlzc3Vlcy4gIFNlZSB0aGUgc2VjdXJpdHkgY29uc2lk ZXJhdGlvbnMgc2VjdGlvbiBpbiBbMV0gZm9yIA0KICAgbW9yZSBkZXRhaWxzLg0KDQoNCjUuIFJl ZmVyZW5jZXMNCg0KICAgWzFdICBXYWhsLCBNLiwgSG93ZXMsIFQuIGFuZCBTLiBLaWxsZSwgIkxp Z2h0d2VpZ2h0IERpcmVjdG9yeSBBY2Nlc3MNCiAgICAgICAgUHJvdG9jb2wodjMpIiwgUkZDIDIy NTEsIERlY2VtYmVyIDE5OTcuDQoNCiAgIFsyXSAgQnJhZG5lciwgUy4sICJLZXkgd29yZHMgZm9y IHVzZSBpbiBSRkNzIHRvIEluZGljYXRlIFJlcXVpcmVtZW50IA0KICAgICAgICBMZXZlbHMiLCBS RkMgMjExOSwgTWFyY2ggMTk5Nw0KDQoNCg0KDQo2LiBBdXRob3JzIEFkZHJlc3MNCg0KICAgTWlj aGFlbCBQLiBBcm1pam8NCiAgIE9uZSBNaWNyb3NvZnQgV2F5DQogICBSZWRtb25kLCBXQSA5ODA1 Mg0KICAgbWljaGFybUBtaWNyb3NvZnQuY29tDQoNCiAgIEV4cGlyZXMgQXVndXN0LCAyMDAxDQoN Cg0KDQoNCg0K ------_=_NextPart_001_01C08FB1.67675CD3-- From list@netscape.com Tue Feb 6 13:20:56 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA26641 for ; Tue, 6 Feb 2001 13:20:55 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f16IIiJ08389; Tue, 6 Feb 2001 10:18:44 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f16IIhI22438; Tue, 6 Feb 2001 10:18:43 -0800 (PST) Resent-Date: Tue, 6 Feb 2001 10:18:43 -0800 (PST) Message-Id: <200102061815.KAA05923@falcon.prod.itd.earthlink.net> Date: Tue, 06 Feb 01 12:07:48 EST From: vince2001@hongkong.com To: vince2001@hongkong.com Subject: Increase Your Sales ACT NOW !!!!! Resent-Message-ID: <"iT711B.A.KcF.8_Dg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com SPECIAL REPORT REVEALS THE "TRUTH" ABOUT HAVING A SUCCESSFUL ONLINE BUSINESS. . . . Our research has found that many people have tried one or more of the following... Free Classifieds? (Don't work) Web Site? (Takes thousands of visitors) Banners? (Expensive and iffy) E-Zine? (They better have a huge list) Search Engines? (Easily buried with thousands of others) S O W H A T D O E S W O R K ? Although often misunderstood, there is one method that has proven to succeed time-after-time. E - M A I L M A R K E T I N G ! ! It's a fact! If you're not using your computer to generate income, you're leaving money on the table. Here's what the experts have to say about E-Mail Marketing: "A gold mine for those who can take advantage of bulk e-mail programs" - The New York Times "E-mail is an incredible lead generation tool" -Crains Magazine "Blows away traditional Mailing" - Advertising Age Here is an example of your potential earnings if you have a product that brings you a profit of around $30. Remember, on the Internet, you can make money 7 days a week, 24 hours a day... even while you sleep, orders come from all over the world! Orders Per Day Weekly Earnings / Monthly Earnings / Yearly Earnings 1 $210.00 $840.00 $10,080.00 2 $420.00 $1,680.00 $20,160.00 3 $630.00 $2,520.00 $30,240.00 5 $1,050.00 $4,200.00 $50,400.00 10 $2,100.00 $8,400.00 $100,000.00 15 $3,150.00 $12,600.00 $151,200.00 THE QUESTION IS... how do you generate those orders? OUR LATEST & GREATEST IS JUST RELEASED! >>> 15 MILLION NEW Addresses - Just Released! <<< THE VERY BEST email addresses available anywhere!! The Million Adresses on CD is the ABSOLUTE BEST product of its kind anywhere in the world today. There are NO OTHER products ANYWHERE that can compete with the quality of this CD. O N E O F A K I N D This CD is a first. No one... and we mean NO ONE has put in the kind of work it takes to produce a CD of this quality. We've been in the list brokerage business for over 5 years and we've never compromised on quality. We won't release any address list until it passes our "high standards" test. Our claim to fame, is that our addresses are deliverable! The number #1 problem with email lists are deliverability. You may have seen dozens of ads for lists or CD's or you may have purchased a list in the past. Chances are, the list was produced 6 months, 1 year or even two years ago! Not ours, a new volume CD comes out every 6-7 weeks. Here's how we prepare our e-mail lists: 1. We clean and eliminate all duplicates. 2. Next, we use a filter list of 400+ words/phrases to clean even more. No address with inappropriate or profane wording survive! 3. Then, a special filter file is used to eliminate the "Web Poisoned" e-mail addresses from the list. Our EXCLUSIVE system reduced these "poison" addresses to near zero. You may have seen CD's with 30, 40, 50 million addresses, not only do they contain may undeliverable addresses, but most are notorious for millions of these "poisoned" email addresses. 4. Next we used our private database of thousands of known "extremists" and kicked off every one we could find. NOTE: We maintain the world's largest list of individuals and groups that are opposed to any kind of commercial e-marketing... they are gone, nuked! 5. We sorted the list into easy-to-manage packets of 100,000 addresses in a simple text (.txt) format. 6. All domains have been verified as valid. WHAT DID WE END UP WITH? 15 Million Addresses Strong! * N O B R A G - J U S T F A C T * Getting this CD is equivalent to buying EVERY CD sold by almost everyone else, combined... EXCEPT - it has been cleaned and the quality is unsurpassed by any list in existence! With our super clean lists you'll send less...and get better results... plus you can start mailing as soon as you receive your CD! * Y O U G E T W H A T Y O U P A Y F O R * Our 15 Million address on CD will result in: * Higher Response Rates * Higher Sales Conversion Ratios * More Receptive prospects; Less Flames & Non-Buyers. * Less Contact With Anti-Commerce Radicals & Extremists. Remember that potential income chart at the beginning of this message? Can you imagine the kind of money you could make if you mailed one million pieces and sold only one tenth (.01%) of one percent? You do the math, you'll be amazed! This product will prove to be the best of it's kind compared to ANY CD in terms of hours and money spent bringing it to market. No competitor will ever duplicate the effort of what it takes for us to produce this superb product. We never have compromised on quality, and surely won't release any product before it passes our "high standards" test. This is not a rental list that is restricted to a one-time mailing. You are purchasing an e-mail address list for your own personal mailings and may use it over-and-over. It's your choice... "Buy ALL the rest or buy the BEST"! DON'T HESITATE on this offer or you will miss out on the most effective way to market anywhere...PERIOD! ======================================================================= ** F R E E B O N U S E S ** Order within 72 hours and we'll include the following FREE Bonuses...ORDER WITHIN 24 HRS AND RECIEVE FULL TECHNICAL SUPPORT FOR SOFTWARE we call this our "BUSINESS ON A DISK" bonus. It's sad, but many people purchase address cd's...and then spend additional hundreds buying the specialized software to enable them to send their mail out. Then they have to search for days-and-months on end to find a product that will sell on the 'net. We've solved that problem entirely with our exclusive "BUSINESS ON A DISK" bonus offer: 1.*BONUS #1 Receive the Mass mailer bulk delivery software, with full operating instructions. This software will get the mail out QUICK! (SORRY, SINCE IT IS FREE WE CANNOT OFFER ANY TECHNICAL SUPPORT, however set-up instructions and "help" files are included. ORDER WITHIN 48 HOURS AND RECEIVE FULL SUPPORT.) 2. Every survey has always indicated that the easiest and most profitable product to sell on the Internet is INFORMATION! If you have an "information" type product, then there is no easier way to become financially independent. Our "BUSINESS ON A DISK" gives you 500 reports/manuals/books that that are yours to use. You may instantly start your "Information Product" business! Just think, you can reproduce a complete book on a floppy disc in just a few seconds, for around 35 cents. These are the same books that have sold for $99. "Special Reports" cost you pennies to produce and can be sold for as high as $15... or the whole group for as high as $140.00. 3. "THE BULK E-MAIL SURVIVAL GUIDE" A manual/guide that addresses the Bulk E-Mail business. Especially useful for beginners. "THE BULK E-MAIL SURVIVAL GUIDE" will answer most of your questions and concerns about Bulk E-Mail. An exclusive for our customers... INCLUDED FREE. 4. List Mate Pro - This is the software the Pro's use to manage their mailing lists. (Not a demo!) This "BUSINESS ON A DISK" bonus is yours absolutely FREE if you order within the next 72 hours. After that... Poof!... it's gone! ***SPECIAL BONUS*** Order within the next 72 hours and receive an additional 1,093,808 e-mail addresses as a prompt ordering bonus. Making it 16,093,808 of the finest premium addresses available anywhere. Order Now! ================================================================= D O N ¹ T H E S I T A T E on this one or you will miss out on the most effective way to market anywhere...PERIOD! O R D E R N O W . . . SAME DAY SERVICE (M-F) if your order is received before 3pm Central . To place an order, you can call us at: 1-308-650-5905 are 1-308-534-2098 Are fax your order to 1-308-534-2098 a special ring will let us now if its a fax are call. This Number is for credit Card Orders Only!!! CHECK BY FAX SERVICES! __________________________________________ To order, via credit card simply cut/paste and print out the EZ ORDER FORM below and fax to our office today. ***** NOW ONLY $250! ***** This "Special Price" is in effect for the next seven days, after that we go back to our regular price of $299.00 ... Don't delay... you can be in business tomorrow! We accept Visa, Mastercard, Amex, Disc and Checks by Fax. ----------------------Cut & Paste---------------------- ---------------------EZ Order Form--------------------- _____Yes! I want everything! I am ordering within 72 hours. Include my FREE "Business On A Disk" bonus along with your 15 Million E-Mail address CD (plus 1,093,808 bonus addresses) for the special price of only $250.00 + shipping as indicated below. _____Yes! I missed the 72 hour special, but I am ordering CD WITH, super clean e-mail addresses within 7 days for the "special" price of only $250.00 + s&h. _____Oop's I missed the 72 hour and 7 day "specials". I am ordering The Cd at the regular price of $299.00 + s&h. ***PLEASE SELECT YOUR SHIPPING OPTION*** ____I would like to receive my package FedEx OVERNIGHT. I am including $15 for shipping. (Hawaii & Alaska $20 - Canada $25, all other International add an *additional* $25 [$40 total] for shipping) ____I would like to receive my package FedEx 2 DAY delivery. I'm including $10 for shipping. (Sorry no Canada or International delivery - Continental U.S. shipping addresses only) ***Please Print Carefully*** NOTE: Orders cannot be shipped without complete information including your signature. No exceptions! NAME____________________________________________________ COMPANY NAME____________________________________________ ADDRESS_________________________________________________ (FedEx can only ship to street addresses - no P.O. boxes) CITY, STATE, ZIP________________________________________ PHONE NUMBER____________________________________________ (required for shipping & tracking) EMAIL ADDRESS___________________________________________ (Print Carefully - required in case we have a question and to send you a confirmation that your order has been shipped and for technical support if you order within 24 hrs) TYPE OF CREDIT CARD: ______VISA _____MASTERCARD ______AMEX ______DISC CREDIT CARD# __________________________________________ EXPIRATION DATE________________________________________ NAME ON CARD___________________________________________ TOTAL AMOUNT (Including Shipping): $___________________ DATE:x__________________ (Required) SIGNATURE:x_________________________________ I understand that I am purchasing the 15 Millions e-mail address on CD, and authorize the above charge to my credit card, the addresses are not rented, but are mine to use for my own mailing, over-and-over. Free bonuses are included, but cannot be considered part of the financial transaction. I understand that it is my responsibility to comply with any laws applicable to my local area. As with all software, once opened the CD may not be returned, however, if found defective it will be replaced with like product at no charge. O R D E R N O W . . . SAME DAY SERVICE (M-F) if your order is received before 3pm Central . To place an order, you can call us at: 1-308-650-5905 are 1-308-534-2098 Are fax your order to 1-308-534-2098 a special ring will let us now if its a fax are call. This Number is for credit Card Orders Only!!! CHECK BY FAX SERVICES! If you would like to fax a check, paste your check below and fax it to our office along with the EZ Order Form forms to: 1-308-534-2098 ********************************************************** ***24 HOUR FAX SERVICES*** PLEASE PASTE YOUR CHECK HERE AND FAX IT TO US AT 1-308-534-2098 ********************************************************** If You fax a check, there is no need for you to mail the original. We will draft a new check, with the exact information from your original check. All checks will be held for bank clearance. (7-10 days) Make payable to: "S.Communications & Informational Services" -=-=-=-=--=-=-=-=-=-=-=Remove Instructions=-=-=-=-=-=-=-=-=-=-=-= ************************************************************** Do not reply to this message - To be removed from future mailings: mailto:no_moreus@yahoo.com?Subject=Remove ************************************************************** From list@netscape.com Tue Feb 6 16:41:49 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id QAA02832 for ; Tue, 6 Feb 2001 16:41:48 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f16LdWJ29293; Tue, 6 Feb 2001 13:39:32 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f16LdXU05155; Tue, 6 Feb 2001 13:39:33 -0800 (PST) Resent-Date: Tue, 6 Feb 2001 13:39:33 -0800 (PST) Reply-To: From: "John Liang" To: "Michael Armijo" , Subject: RE: Updated Result Code for LDAP Controls draft - draft-armijo-ldap-control-error-01.txt Date: Tue, 6 Feb 2001 16:38:42 -0500 Message-ID: <000b01c09085$2cc4a9b0$07a75b18@ne.mediaone.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2377.0 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 In-Reply-To: <96BABA22ECEAEA45B53D08D63E1B567852810C@DF-SPIKE.platinum.corp.microsoft.com> Resent-Message-ID: <"-fWE5.A.RQB.U8Gg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit HI Michael, As in the following part of the draft, The controlError SHOULD NOT be used to represent any condition that can be defined using any existing result code in RFC 2251. Does that mean for instance, if there is 'noSuchAttribute' error happened for Server side sorting, both the searchResultDone and the sssResponseControl would return 'noSuchAttribute' error? And only if the error can not be found in RFC 2251 like 'sortContolMissing' for VLV, this new controlError will be used in searchResultDone message. Thanks, -- John Liang > -----Original Message----- > From: Michael Armijo [mailto:micharm@Exchange.Microsoft.com] > Sent: Monday, February 05, 2001 3:23 PM > To: ietf-ldapext@netscape.com > Subject: Updated Result Code for LDAP Controls draft - > draft-armijo-ldap-control-error-01.txt > > > Here is the updated version of the LDAP Control error draft. > > Please review and comment on the updated draft. I would like to pursue > this being progressed as a PS ASAP so we can move forward on the VLV > draft. > > thanks, > Michael > From list@netscape.com Tue Feb 6 17:46:36 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA04126 for ; Tue, 6 Feb 2001 17:46:35 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f16MgNb23160; Tue, 6 Feb 2001 14:42:24 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f16MgPw04413; Tue, 6 Feb 2001 14:42:25 -0800 (PST) Resent-Date: Tue, 6 Feb 2001 14:42:25 -0800 (PST) From: xs26@netease.com Message-Id: <200102062231.GAA15573@u4000.> To: Subject: Stealth Mass Mailer, 10 Mil E-Addresses & Bulk Friendly ISPs.. Date: Tue, 06 Feb 2001 15:43:44 -0700 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 3 X-MSMail-Priority: Normal Reply-To: xs26@netease.com Resent-Message-ID: <"-sa0kD.A.nEB.P3Hg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: quoted-printable
Email advertising WORKS!
Email Advertise your product or website to millions for only $99.

For $99.00 you will receive the Stealth Bulk Mailing Software,
List Manager, Over 10 Million E-Mail Addresses,
and as a FREE BONUS, a Bulletproof Mail Server to send your mail.

NEVER, lose your ISP service again!

Also, VERY HARD TO FIND:
BIG LIST OF OVERSEAS BULLETPROOF ISP's.

Your website will never be shut down again!

Its only $99 for everything, and you can download it all NOW!

FOR MORE INFO:
REPLY, with "99" in the --> SUBJECT FIELD!

To be PERMANENTLY REMOVED from our mail list,
REPLY, with "REMOVE" in the --> SUBJECT FIELD!

 From list@netscape.com Tue Feb 6 19:38:00 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id TAA05210 for ; Tue, 6 Feb 2001 19:38:00 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f170aKb18334; Tue, 6 Feb 2001 16:36:20 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f170aLE24698; Tue, 6 Feb 2001 16:36:21 -0800 (PST) Resent-Date: Tue, 6 Feb 2001 16:36:21 -0800 (PST) X-MimeOLE: Produced By Microsoft Exchange V6.0.4633.0 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Subject: RE: Updated Result Code for LDAP Controls draft - draft-armijo-ldap-control-error-01.txt Date: Tue, 6 Feb 2001 16:01:55 -0800 Message-ID: <96BABA22ECEAEA45B53D08D63E1B5678528111@DF-SPIKE.platinum.corp.microsoft.com> Thread-Topic: Updated Result Code for LDAP Controls draft - draft-armijo-ldap-control-error-01.txt Thread-Index: AcCQk7jIEPLdZfy3SAm7wY2UyTOzMQAATWyQ From: "Michael Armijo" To: , X-OriginalArrivalTime: 07 Feb 2001 00:01:57.0178 (UTC) FILETIME=[2FBE71A0:01C09099] Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id f170aIv24672 Resent-Message-ID: <"cuGRY.A.oBG.CiJg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit The main goal of this draft is to not overload existing result codes (like 'other'). Likewise, this result code should not be overloaded. That is the reason for the 'SHOULD NOT be used to represent... existing result code' wording. This is particularly important for controls that will primarily make use of the operation response field for error handling. That said, there will be controls (such as Sort and VLV) that wish to have control-specific result codes returned via an embedded result field. In these cases, the best practice would be to return controlError in the operation response and to return any results relevant to the control in the embedded response. Re-reading the draft, I can see where there might be some ambiguity about this. I will update the wording (pending any more comments) and send out an updated draft to the list. Michael > -----Original Message----- > From: John Liang [mailto:John.Liang@openwave.com] > Sent: Tuesday, February 06, 2001 1:39 PM > To: Michael Armijo; ietf-ldapext@netscape.com > Subject: RE: Updated Result Code for LDAP Controls draft - > draft-armijo-ldap-control-error-01.txt > > > HI Michael, > > As in the following part of the draft, > > The controlError SHOULD NOT be used to represent any condition that > can be defined using any existing result code in RFC 2251. > > Does that mean for instance, if there is 'noSuchAttribute' error > happened for Server side sorting, both the searchResultDone > and the sssResponseControl would return 'noSuchAttribute' error? > > And only if the error can not be found in RFC 2251 like > 'sortContolMissing' for VLV, this new controlError will be > used in searchResultDone message. > > Thanks, > -- > John Liang > > > -----Original Message----- > > From: Michael Armijo [mailto:micharm@Exchange.Microsoft.com] > > Sent: Monday, February 05, 2001 3:23 PM > > To: ietf-ldapext@netscape.com > > Subject: Updated Result Code for LDAP Controls draft - > > draft-armijo-ldap-control-error-01.txt > > > > > > Here is the updated version of the LDAP Control error draft. > > > > Please review and comment on the updated draft. I would > like to pursue > > this being progressed as a PS ASAP so we can move forward on the VLV > > draft. > > > > thanks, > > Michael > > > > > From list@netscape.com Tue Feb 6 22:41:24 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id WAA10125 for ; Tue, 6 Feb 2001 22:41:23 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f173dGJ07611; Tue, 6 Feb 2001 19:39:16 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f173dHA06380; Tue, 6 Feb 2001 19:39:17 -0800 (PST) Resent-Date: Tue, 6 Feb 2001 19:39:17 -0800 (PST) Message-ID: <21456200123732225160@> X-EM-Version: 5, 0, 0, 14 X-EM-Registration: #01B0530810E603002D00 Reply-To: feria@mac21.com From: "MAC21" To: "Galerías de Arte y Artistas"@xwing.netscape.com Subject: MAC21 Art Fair & Art-e-mail 2001 Date: Wed, 7 Feb 2001 04:22:25 +0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_84815C5ABAF209EF376268C8" Resent-Message-ID: <"uIiMHB.A.OjB.jNMg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com ------=_NextPart_84815C5ABAF209EF376268C8 Content-type: text/plain; charset="US-ASCII" X-MIME-Autoconverted: from 8bit to quoted-printable by netscape.com id f173dGJ07611 Content-Transfer-Encoding: quoted-printable M A C 2 1 - 2001=20 =20 International Contemporary Art Fair=20 Feria Internacional de Arte Contempor=E1neo=20 =20 ________________________________________________ Contenido:=20 1 ................. ENGLISH TEXT=20 2 ................. TEXTO EN ESPA=D1OL ________________________________________________ =20 1 ................. ENGLISH TEXT=20 ________________________________________________ =20 You can visit actualized: =20 www.mac21.com =20 with complete information of 4 Edition of:=20 =20 MAC21 - International Contemporary Art Fair=20 =20 that will take place in the Fairs and Congresses=20 Center of Marbella (Spain), from 18 to 22 July, 2001. =20 Galleries, conditions, application, prices,... feria@mac21.com =20 Moreover, information of the 3 Edition of=20 Art-e-mail, International Exhibition of E-mails of Artists. art-e-mail@feriadearte.com =20 =20 MAC21 =20 ________________________________________________ 2 ................. TEXTO ESPA=D1OL ________________________________________________ Ya puedes visitar actualizada: www.mac21.com =20 con toda la informaci=F3n de la 4 edicion de=20 MAC21-Feria Internacional de Arte Contemporaneo =20 que se celebrara en el Palacio de Ferias y Congresos de Marbella (Espa=F1= a), del 18 al 22 de julio de 2001. Galer=EDas, condiciones, inscripcion, precios,... feria@mac21.com =20 =20 Adem=E1s, informaci=F3n de la 3 Edici=F3n de=20 Art-e-mail, Exposici=F3n Internacional de E-mails de Artistas.=20 art-e-mail@feriadearte.com =20 =20 MAC21 =20 ________________________________________________ =20 We adhere to responsible e-mail ethics if you wish to be "removed" from future mailings, please=20 click on this link mailto: mailto:publicidad@mac21.com?subject=3DREMOVE a= nd hit send=20 ________________________________________________ Acogiendonos a la etica de la comunicacion por e-mail, si desea ser "borrado" de futuros envios,=20 por favor pulse el siguiente link mailto: mailto:publicidad@mac21.com?subject=3DBORRAR y envie. ________________________________________________ Firma y fecha ------=_NextPart_84815C5ABAF209EF376268C8 Content-Type: text/html; charset="US-ASCII" X-MIME-Autoconverted: from 8bit to quoted-printable by netscape.com id f173dGJ07611 Content-Transfer-Encoding: quoted-printable

M A C  2 1 - 2001

International Contempor= ary Art=20 Fair
Feria Internacional de Arte Contempor=E1neo
=20


Contenido:
1 ................. ENGLISH TEXT
= 2=20 ................. TEXTO EN ESPA=D1OL
 
ENGLISH TEXT=20
 

You can visit actualized:
 
www.mac21.com
 
with complete information o= f 4=20 Edition of:

MAC21
International Contemporary Art=20 Fair

that will take place in the Fairs and Congresses
Center=20 of Marbella (Spain), from 18 to 22 July, 2001.
 
Galleries, conditions, application,=20 prices,...
feria@mac21.com
 
Moreover,=20 information of the 3 Edition of:
=20
Art-e-mail
International Exhibition of E-mails of=20 Artists.
 
www.mac21.com
www.feriaderate.com
 

art-e-mail@feriadearte.com=

 
MAC21 & Feriadearte=20 2001

 
TEXTO=20 ESPA=D1OL

Ya puedes visitar actualizada:

 
con toda la informaci=F3n de la 4 edicion de:

MAC21
Feria Internacional de Arte=20 Contemporaneo
 
que se celebrara en el Palacio de Ferias y Congresos de Marbella=20 (Espa=F1a), del 18 al 22 de julio de 2001.
Galer=EDas, condiciones, inscripcion, precios,...

Adem=E1s, informaci=F3n de la 3 Edici=F3n de:

Art-e-mail
Exposici=F3n Internacional de E-mails de=20 Artistas.

www.mac21.com
www.feriadearte.com

art-e-mail@feriadearte.com=
 
MAC21 &=20 Feriadearte 2001

We adhere to responsible e-mail ethics if you wish to be "removed" from=20 future mailings, please click on this link mailto: mailto:ublic= idad@ma c21.com?subject=3DREMOVE and=20 hit send=20
Acogiendonos a la etica de la comunicacion por e-mail, si desea ser=20 "borrado" de futuros envios, por favor pulse el siguiente link mailto: mailto:publicidad@m= ac21.co m?subject=3DBORRAR y=20 envie.
------=_NextPart_84815C5ABAF209EF376268C8-- From list@netscape.com Wed Feb 7 12:01:53 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA03712 for ; Wed, 7 Feb 2001 12:01:53 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f17Gx6b23214; Wed, 7 Feb 2001 08:59:06 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f17Gx6Q21448; Wed, 7 Feb 2001 08:59:06 -0800 (PST) Resent-Date: Wed, 7 Feb 2001 08:59:06 -0800 (PST) Message-ID: <000023635234$000074cf$000015d3@mail.eunet.sk> To: <4lgd3148natw3x@telmex.net.mx> From: bigjoe@japan.com Subject: Brand New E-Mail pager for FR-EE! 5587 Date: Wed, 07 Feb 2001 10:21:13 -0600 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal Reply-To: bigjoe@japan.com X-OriginalArrivalTime: 07 Nov 2000 18:26:02.0300 (UTC) FILETIME=[2EE8DFC0:01C048E8] Resent-Message-ID: <"ZQ0FkD.A.2OF.Y7Xg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit No activation fee No big prepayment of airtime No credit check PAGING AMERICA is going to give you absolutely Free the Brand new Motorola Accessmate E-Mail display pager. This is the top of the line PCS technology pager made today. This side viewable display pager has a retail value of $189.00and comes with its own e-mail address so you can receive your e-mails as well as alpha-numeric and numeric messages instantly where ever you are. Your new e-mail pager has features like 50,000 character memory, message time stamping, automatic garbled message correction, beeps or vibrates, incandescent backlight, saved message folder, a unique never out of range feature that allows your pager to retrieve messages sent earlier when your pager was out of range or turned completely off. You can also receive weather, news and sports .The Motorola e-mail pager is very small and uses only a single double A battery. All we ask before we ship you your Free pager is for you to allow us to provide the airtime for you. There is no long term contract or credit check. Airtime is month to month and can be cancelled at any time. This pager will comes pre-programmed with its own e-mail address as well as a local telephone number to receive numeric pages. This pager comes with a complete 30 day money back guarantee, if after receiving this pager you're not completely happy, send it back and receive a full refund. For immediate delivery call Paging America at toll free at 877-699-8546 Brand New E-Mail pager for FREE! No long term contract From list@netscape.com Wed Feb 7 20:20:22 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA13541 for ; Wed, 7 Feb 2001 20:20:22 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f181I6b11194; Wed, 7 Feb 2001 17:18:06 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f181I7I07657; Wed, 7 Feb 2001 17:18:07 -0800 (PST) Resent-Date: Wed, 7 Feb 2001 17:18:07 -0800 (PST) Mime-Version: 1.0 X-Sender: brent.holland@pop.openwave.com Message-Id: Date: Wed, 7 Feb 2001 17:15:25 -0800 To: ietf-ldapext@netscape.com From: Brent Holland Subject: dnAttribute Processing in Extensible Match Filters Content-Type: text/plain; charset="us-ascii" ; format="flowed" Resent-Message-ID: <"FEmKb.A.P3B.NPfg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Should an extensible search with the dn attribute flag set and of the form: ldapsearch -b 'dc=mycompany,dc=com' '(dc:dn:=com)' return all the objects below 'dc=mycompany,dc=com' ? In other words, should superior RDN's above the search base object be considered for the extensible match when the dnAttributes field of the extensible filter is TRUE? Thanks for your help. Brent Holland brent.holland@openwave.com From list@netscape.com Wed Feb 7 20:37:56 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA13785 for ; Wed, 7 Feb 2001 20:37:54 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f181aHb14532; Wed, 7 Feb 2001 17:36:17 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f181aIU15710; Wed, 7 Feb 2001 17:36:18 -0800 (PST) Resent-Date: Wed, 7 Feb 2001 17:36:18 -0800 (PST) Message-Id: <5.0.2.1.0.20010207172634.00ae7770@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Wed, 07 Feb 2001 17:35:58 -0800 To: Brent Holland From: "Kurt D. Zeilenga" Subject: Re: dnAttribute Processing in Extensible Match Filters Cc: ietf-ldapext@netscape.com In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"OsDrE.A.H1D.Rgfg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 05:15 PM 2/7/01 -0800, Brent Holland wrote: >Should an extensible search with the dn attribute flag set and of the form: > ldapsearch -b 'dc=mycompany,dc=com' '(dc:dn:=com)' >return all the objects below 'dc=mycompany,dc=com' ? In other words, should superior RDN's above the search base object be considered for the extensible match when the dnAttributes field of the extensible filter is TRUE? RFC 2251, 4.5.1. (emphasis added) If the dnAttributes field is set to TRUE, the match is applied against >>ALL THE ATTRIBUTES<< in an entry's distinguished name >>AS WELL<<, and also evaluates to TRUE if there is at least one attribute in the distinguished name for which the filter item evaluates to TRUE. From list@netscape.com Wed Feb 7 20:55:35 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA14110 for ; Wed, 7 Feb 2001 20:55:34 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f181rUJ03641; Wed, 7 Feb 2001 17:53:30 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f181rVA24161; Wed, 7 Feb 2001 17:53:31 -0800 (PST) Resent-Date: Wed, 7 Feb 2001 17:53:31 -0800 (PST) Message-Id: <5.0.2.1.0.20010207174223.00aedb10@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Wed, 07 Feb 2001 17:53:35 -0800 To: Brent Holland From: "Kurt D. Zeilenga" Subject: Re: Extensible Match Filters Cc: ietf-ldapext@netscape.com In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"UaiKLB.A.M5F.awfg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 02:21 PM 2/5/01 -0800, Brent Holland wrote: >Is is possible for a LDAPV3 extensible match filter to contain an assertion value with Substring Assertion syntax in the form: > > ldapsearch (attr:dn:1.2.3.4.5.6.7:=*foo*bar*) > >The RFC's seem to be in conflict on this type of value production in the extensible filter: reference section 4.5.1 of RFC 2251, section 4 of RFC 2254, and section 8.3 of RFC 2252. The above filter is illegal. If value contains '*', it must be escaped. For example, to test for Kurt*Zeilenga in the common name: (cn:dn:1.3.6.1.4.1.1466.115.121.1.58:=foo\2Abar) Note that if you wanted to search the any substring "foo*bar" you'd have to do: (cn:dn:1.3.6.1.4.1.1466.115.121.1.58:=\2Afoo\5C2Abar\2A) Note the "*" in the substring must be escaped per RFC 2252, 8.2 / 4.3 when producing substring value "*foo\2Abar*" and then this escaped per RFC2254, 4. Kurt From list@netscape.com Wed Feb 7 23:10:41 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id XAA17280 for ; Wed, 7 Feb 2001 23:10:41 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1848rb07218; Wed, 7 Feb 2001 20:08:54 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1847eo16110; Wed, 7 Feb 2001 20:07:40 -0800 (PST) Resent-Date: Wed, 7 Feb 2001 20:07:40 -0800 (PST) Reply-To: From: "Steven Legg" To: "'Kurt D. Zeilenga'" , "'Brent Holland'" Cc: , Subject: RE: Extensible Match Filters Date: Thu, 8 Feb 2001 15:07:24 +1100 Message-ID: <000001c09184$a5834cd0$b05508cb@osmium.adacel.com.au> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2377.0 Importance: Normal In-Reply-To: <5.0.2.1.0.20010207174223.00aedb10@router.boolean.net> X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2120.0 Resent-Message-ID: <"EZZEU.A.Q4D.Fuhg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Kurt, I think the real problem Brent was alluding to is the fact that the ABNF for in RFC 2254 only allows the thing after the `=' to be an AttributeValue, whereas it should be an AssertionValue. This means that RFC 2254 does not cater for substring matching rules in an extensible match. It's something for ldapbis to fix. Whether the asterisks should be escaped depends on how one repairs RFC2254. Regards, Steven > -----Original Message----- > From: Kurt D. Zeilenga [mailto:Kurt@OpenLDAP.org] > Sent: Thursday, 8 February 2001 12:54 > To: Brent Holland > Cc: ietf-ldapext@netscape.com > Subject: Re: Extensible Match Filters > > > At 02:21 PM 2/5/01 -0800, Brent Holland wrote: > >Is is possible for a LDAPV3 extensible match filter to > contain an assertion value with Substring Assertion syntax in > the form: > > > > ldapsearch (attr:dn:1.2.3.4.5.6.7:=*foo*bar*) > > > >The RFC's seem to be in conflict on this type of value > production in the extensible filter: reference section 4.5.1 > of RFC 2251, section 4 of RFC 2254, and section 8.3 of RFC 2252. > > The above filter is illegal. If value contains '*', it must > be escaped. For example, to test for Kurt*Zeilenga in the > common name: > (cn:dn:1.3.6.1.4.1.1466.115.121.1.58:=foo\2Abar) > > Note that if you wanted to search the any substring "foo*bar" > you'd have to do: > (cn:dn:1.3.6.1.4.1.1466.115.121.1.58:=\2Afoo\5C2Abar\2A) > > Note the "*" in the substring must be escaped per > RFC 2252, 8.2 / 4.3 when producing substring value "*foo\2Abar*" > and then this escaped per RFC2254, 4. > > Kurt > > From list@netscape.com Thu Feb 8 00:12:21 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id AAA18030 for ; Thu, 8 Feb 2001 00:12:20 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1859pb13228; Wed, 7 Feb 2001 21:09:51 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1859q603192; Wed, 7 Feb 2001 21:09:52 -0800 (PST) Resent-Date: Wed, 7 Feb 2001 21:09:52 -0800 (PST) From: tnvnc@msn.com To: eypys@Friendsonthenet.netscape.com Reply-To: su2m@bigfoot.com Subject: A Duck, 3 Chickens, Whipped Cream, and $99! [ekuxj] Date: Wed, 7 Feb 2001 23:44:38 -0500 Message-ID: Resent-Message-ID: <"k8GGBB.A.Yx.eoig6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Hello, If you are wondering about the title of this message, please read on and you'll find your answer!! Having a home based business to me is NOT a game or something I hope just to make a few extra bucks with. We ALL have pressing needs. Consequently, over the last three years, I have had to sink money, time and effort into various internet based businesses. Some of these wound up to be lame ducks, others were like chickens that did nothing more than squawk a lot, and others promised whipped cream, but delivered SOUR cream. Others have done OK. But the winds of fortune have changed, and are now blowing VERY FAVORABLY!! I want to share this discovery with you. As a marketer you will be excited by this because: It is not another MLM Co.....It is not a Downline Club.... You will not represent Any Products or Services!! Our Product is PROFIT !! What we are is a group of like-minded individuals interested in MAXAMIZING PROFIT from existing legitimate businesses. Our goal is to put the Companies and their compensation plans to work for us!! (What a NOVEL IDEA!!) We use a simple, yet brilliant concept to capitalize on the absolutely Best Pay Plans in the Industry!! You will NEVER be used by an MLM company again!! YOU will be in the Driver's Seat!! I promise you.....there is No Flaw in this Plan! If you follow the dots YOU will make Major, Serious Money!! This is for everyone...not just Networkers!! We have mapped out a "Roadmap to Success!!" We offer a plan to get started for a ONE TIME ONLY $99 out of pocket!!!!! There are NO monthly purchase requirements!! Your very first check will DOUBLE your money back, and then quickly grow to four figure, and even FIVE FIGURE CHECKS!! YOUR REQUIREMENT THEN????? YOU MUST ENROLL 3 PEOPLE!!! NOT 100, NOT 500, JUST 3!!!! Many in our organization have enrolled 20-30 people in ONLY a month’s time. This is REAL and it is HUGE! But I must maintain you are REQUIRED to bring in 3 people.....However, we have ALL THE TOOLS in place for you to be able to do this in a very short period of time! IF YOU DO NOT ENROLL 3 PEOPLE YOU WILL NOT MAKE MONEY! WE ARE LOOKING FOR ONLY SERIOUS INDIVIDUALS TO JOIN OUR GROUP!!! To receive your FREE "Roadmap" Reply with "Send ROADMAP Info" in the subject line. mailto:t2m51@bigfoot.com?subject=Send_ROADMAP_Info To YOUR Success, Deb PS..Should this email address be down. Please "Fax" your response instead, with your email address___, and the words "Send ROADMAP Info." to: 305-425-3205. From list@netscape.com Thu Feb 8 05:56:51 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id FAA03980 for ; Thu, 8 Feb 2001 05:56:51 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f18As7b11569; Thu, 8 Feb 2001 02:54:07 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f18AsAo20529; Thu, 8 Feb 2001 02:54:10 -0800 (PST) Resent-Date: Thu, 8 Feb 2001 02:54:10 -0800 (PST) Message-ID: From: ted@accessmaster.com Subject: Bee My Valentine!!!! Date: Mon, 05 Feb 01 05:01:52 Pacific Standard Time Reply-To: newsalesjob@accessmaster.com X-Priority: 3 X-MSMailPriority: Normal Importance: Normal MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_018C_01BD9940.715D52A0" Resent-Message-ID: <"GxvTpC.A.LAF.Qrng6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a multi-part message in MIME format. ------=_NextPart_000_018C_01BD9940.715D52A0 Content-Type: text/html;

Don't Have A Valentine

To Satisfy Your Lust?

oooooooooo

Then This Website

Is A Must !!!

pppppppppp

CLICK HERE !!!





 ------=_NextPart_000_018C_01BD9940.715D52A0-- From list@netscape.com Thu Feb 8 07:26:58 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id HAA05026 for ; Thu, 8 Feb 2001 07:26:56 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f18CPGJ28168; Thu, 8 Feb 2001 04:25:16 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f18CPFY13350; Thu, 8 Feb 2001 04:25:15 -0800 (PST) Resent-Date: Thu, 8 Feb 2001 04:25:15 -0800 (PST) Message-Id: <200102081224.HAA04766@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; CC: ietf-ldapext@netscape.com From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-zeilenga-ldap-authpasswd-05.txt Date: Thu, 08 Feb 2001 07:24:22 -0500 Sender: nsyracus@cnri.reston.va.us Resent-Message-ID: <"Wg9YnD.A.TOD.kApg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : LDAP Authentication Password Schema Author(s) : K. Zeilenga Filename : draft-zeilenga-ldap-authpasswd-05.txt Pages : 9 Date : 07-Feb-01 This document describes schema in support of user/password authentication in a LDAP directory including the authPassword attribute type. This attribute type holds values derived from the user's password(s) (commonly using cryptographic strength one-way hash). authPassword is intended to used instead of userPassword. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-zeilenga-ldap-authpasswd-05.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-zeilenga-ldap-authpasswd-05.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-zeilenga-ldap-authpasswd-05.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20010207145249.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-zeilenga-ldap-authpasswd-05.txt --OtherAccess Content-Type: Message/External-body; name="draft-zeilenga-ldap-authpasswd-05.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20010207145249.I-D@ietf.org> --OtherAccess-- --NextPart-- From list@netscape.com Thu Feb 8 07:27:11 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id HAA05065 for ; Thu, 8 Feb 2001 07:27:10 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f18CP4J28053; Thu, 8 Feb 2001 04:25:05 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f18CP4U13056; Thu, 8 Feb 2001 04:25:04 -0800 (PST) Resent-Date: Thu, 8 Feb 2001 04:25:04 -0800 (PST) Message-Id: <200102081224.HAA04782@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; CC: ietf-ldapext@netscape.com From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-zeilenga-ldap-cancel-01.txt Date: Thu, 08 Feb 2001 07:24:26 -0500 Sender: nsyracus@cnri.reston.va.us Resent-Message-ID: <"0cprqC.A.VLD.cApg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : LDAP Cancel Extended Operation Author(s) : K. Zeilenga Filename : draft-zeilenga-ldap-cancel-01.txt Pages : 5 Date : 07-Feb-01 This specification describes an extended operation to cancel (or abandon) an outstanding operation. Unlike the LDAP Abandon operation [RFC2251] but like the DAP Abandon operation [X.511], this operation has a response to indicate whether or not the operation was successful. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-zeilenga-ldap-cancel-01.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-zeilenga-ldap-cancel-01.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-zeilenga-ldap-cancel-01.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20010207145259.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-zeilenga-ldap-cancel-01.txt --OtherAccess Content-Type: Message/External-body; name="draft-zeilenga-ldap-cancel-01.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20010207145259.I-D@ietf.org> --OtherAccess-- --NextPart-- From list@netscape.com Thu Feb 8 07:27:12 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id HAA05076 for ; Thu, 8 Feb 2001 07:27:12 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f18CP0J28003; Thu, 8 Feb 2001 04:25:00 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f18CP0I12985; Thu, 8 Feb 2001 04:25:00 -0800 (PST) Resent-Date: Thu, 8 Feb 2001 04:25:00 -0800 (PST) Message-Id: <200102081224.HAA04814@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; CC: ietf-ldapext@netscape.com From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-zeilenga-ldap-namedref-02.txt Date: Thu, 08 Feb 2001 07:24:35 -0500 Sender: nsyracus@cnri.reston.va.us Resent-Message-ID: <"K1J2o.A.kKD.bApg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Named Subordinate References in LDAP Directories Author(s) : K. Zeilenga Filename : draft-zeilenga-ldap-namedref-02.txt Pages : 13 Date : 07-Feb-01 This document details schema and protocol elements for representing and manipulating named subordinate references in LDAP [RFC2251] directories. A referral object is used to hold references at subordinate delegation points in the directory. These referral objects hold one or more URIs [RFC1738] contained in values of the ref attribute type. A control, ManageDsaIT, is defined to allow manipulation of referral objects as normal objects. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-zeilenga-ldap-namedref-02.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-zeilenga-ldap-namedref-02.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-zeilenga-ldap-namedref-02.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20010207151157.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-zeilenga-ldap-namedref-02.txt --OtherAccess Content-Type: Message/External-body; name="draft-zeilenga-ldap-namedref-02.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20010207151157.I-D@ietf.org> --OtherAccess-- --NextPart-- From list@netscape.com Thu Feb 8 07:28:53 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id HAA05124 for ; Thu, 8 Feb 2001 07:28:52 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f18CP7b19575; Thu, 8 Feb 2001 04:25:07 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f18CP9U13216; Thu, 8 Feb 2001 04:25:09 -0800 (PST) Resent-Date: Thu, 8 Feb 2001 04:25:09 -0800 (PST) Message-Id: <200102081224.HAA04798@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; CC: ietf-ldapext@netscape.com, ietf-ldapbis@openldap.org From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-zeilenga-ldapv3bis-opattrs-04.txt Date: Thu, 08 Feb 2001 07:24:31 -0500 Sender: nsyracus@cnri.reston.va.us Resent-Message-ID: <"nrbkR.A.2MD.hApg6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : LDAPv3: All Operational Attributes Author(s) : K. Zeilenga Filename : draft-zeilenga-ldapv3bis-opattrs-04.txt Pages : 5 Date : 07-Feb-01 X.500 [X.500] provides a mechanism for clients to request all operational attributes be returned with entries provided in response to a search operation. This mechanism is often used by clients to discover which operatinal attributes are present in an entry. LDAP [RFC2251] does not provide a similar mechanism to clients. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-zeilenga-ldapv3bis-opattrs-04.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-zeilenga-ldapv3bis-opattrs-04.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-zeilenga-ldapv3bis-opattrs-04.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20010207145309.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-zeilenga-ldapv3bis-opattrs-04.txt --OtherAccess Content-Type: Message/External-body; name="draft-zeilenga-ldapv3bis-opattrs-04.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20010207145309.I-D@ietf.org> --OtherAccess-- --NextPart-- From list@netscape.com Thu Feb 8 20:49:22 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA23006 for ; Thu, 8 Feb 2001 20:49:21 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f191loJ07283; Thu, 8 Feb 2001 17:47:50 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f191lpo07065; Thu, 8 Feb 2001 17:47:51 -0800 (PST) Resent-Date: Thu, 8 Feb 2001 17:47:51 -0800 (PST) Message-Id: <5.0.2.1.0.20010208173852.00a8abb0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Thu, 08 Feb 2001 17:47:21 -0800 To: ietf-ldapext@netscape.com From: "Kurt D. Zeilenga" Subject: AuthPassword I-D: draft-zeilenga-ldap-authpasswd-05.txt Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"rH9Ns.A.EuB.Gx0g6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This revision adds an EQUALITY matching rule to authPassword attribute type as well as incorporates numerous editorial changes suggested by Tim Hahn and others. Your comments are solicited. Kurt From list@netscape.com Sun Feb 11 05:56:31 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id FAA07800 for ; Sun, 11 Feb 2001 05:56:31 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1BAs0b05854; Sun, 11 Feb 2001 02:54:00 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1BAs3614009; Sun, 11 Feb 2001 02:54:03 -0800 (PST) Resent-Date: Sun, 11 Feb 2001 02:54:03 -0800 (PST) Message-ID: <000006fe737c$00002084$00004d1d@> To: From: rjjjmm@hotmail.com Subject: Getting Back To Your Recent Request.. Make 2001 Better Than 2000 ! 19741 Date: Sun, 11 Feb 2001 05:45:42 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal Resent-Message-ID: <"VZWMQ.A.LaD.J9mh6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit GETTING BACK TO YOUR REQUEST!! * You were referred to me as someone who was ready for a Financial Breakthrough! * If you want to be successful you must first find someone who is successful and Duplicate what they do. * I am willing to teach you the secrets that I have leaned in creating Financial Independence given that you pass a brief qualification. * I am looking for a few motivated and teachable individuals who are ready to start earning at least $2000 per week starting right away. And a SEVEN FIGURE income within the next 2 years. Yes, I said, "You could be a millionaire!" Can you accept this in your life? ** This is not multi-level marketing or a pyramid scheme or a get rich quick scheme. This is a Real, Legitimate business that does require a certain individual. Call me Toll Free at the number below and I will contact you back to conduct a brief interview and to provide you with additional information. 1-800-320-9895 ex 4774 24 Hrs/ 7 Days Thank You and I hope to hear from you! Dave "The moment you commit and quit holding back, all sorts of unforeseen incidents, meetings and material assistance will rise up to help you. The simple act of commitment is a powerful magnet for help!" - Napoleon Hill To get off of it send email to amaratina@yahoo.com From list@netscape.com Sun Feb 11 11:24:20 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id LAA10589 for ; Sun, 11 Feb 2001 11:24:19 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1BGLqj25928; Sun, 11 Feb 2001 08:21:52 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1BGLro06183; Sun, 11 Feb 2001 08:21:53 -0800 (PST) Resent-Date: Sun, 11 Feb 2001 08:21:53 -0800 (PST) Message-ID: <0000022e0842$00003b1d$00000cf5@> To: From: drbjrb@hotmail.com Subject: Short on cash? We'll give you a F R E E 2-Way Motorola Pager. 3317 Date: Sun, 11 Feb 2001 23:52:44 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal Resent-Message-ID: <"hNBdvC.A.VfB.fwrh6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit F R E E 2-Way Motorola PAGER New 2-Way Motorola Pager for F R E E! No long term contract No activation fee No big prepayment of airtime No credit check PAGING AMERICA is going to give you absolutely F R E E the Brand new 2-Way Motorola pager. This top of the line pager will even receive your E-MAIL! Included with your new pager is the technology that allows you to respond to the E-mails you receive. You can also send messages back and forth between pagers! Don't pass this offer up! Call 877-699-7410 TODAY while supplies last Why pay $189.00 at a retail store when we're giving you this pager absolutely FREE. Your new pager will come with its own e-mail address so you can receive your e-mails as well as alpha-numeric and numeric messages instantly where ever you are. Your new two-way pager has features like 50,000 character memory, message time stamping, automatic garbled message correction, beeps or vibrates, incandescent backlight, saved message folder, a unique never out of range feature that allows your pager to retrieve messages sent earlier when your pager was out of range or turned completely off. You can also receive weather, news and sports. This Motorola pager is small and light weight. All we ask before we'll ship you your new Free pager is for you to allow us to provide some airtime for you. There is no long term contract or credit check. Airtime is month to month and can be cancelled at any time. This pager will come pre-programmed with its own e-mail address as well as a local telephone number to receive numeric pages. This pager comes with a complete 30 day money back guarantee, if after receiving this pager you're not completely happy, send it back and receive a full refund. For immediate delivery call Paging America at 877-699-7410 To be taken off send email to redrovergirl@yahoo.com From list@netscape.com Sun Feb 11 17:36:22 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA13282 for ; Sun, 11 Feb 2001 17:36:22 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1BMYVj15092; Sun, 11 Feb 2001 14:34:32 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1BMYXA11124; Sun, 11 Feb 2001 14:34:33 -0800 (PST) Resent-Date: Sun, 11 Feb 2001 14:34:33 -0800 (PST) Date: Sun, 11 Feb 2001 14:34:07 -0800 (PST) Message-Id: <200102112234.f1BMXst04054@ywing.netscape.com> From: To: @netscape.com Subject: Easy Money X-Reply-To: yags@zwallet Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"1MH3eD.A.TtC.3Nxh6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Dear Friend: AS SEEN ON NATIONAL TV: ''Making over half million dollars every 4 to 5 months from your home for an investment of only $25 U.S. Dollars expense one time'' THANKS TO THE COMPUTER AGE AND THE INTERNET! =============================================== BE A MILLIONAIRE LIKE OTHERS WITHIN A YEAR !! Before you say ''Bull'' , please read the following. This is the letter you have been hearing about on the news lately. Due to the popularity of this letter on the internet, a national weekly news program recently devoted an entire show to the investigation of this program described below , to see if it really can make people money. The show also investigated whether or not the program was legal. Their findings proved once and for all that there are ''absolutely NO. Laws prohibiting the participation in the program and if people can follow the simple instructions, they are bound to make some mega bucks with only $25 out of pocket cost''. DUE TO THE RECENT INCREASE OF POPULARITY & RESPECT THIS PROGRAM HAS ATTAINED, IT IS CURRENTLY WORKING BETTER THAN EVER. This is what one had to say: ''Thanks to this profitable opportunity. I was approached many times before but each time I passed on it. I am so glad I finally joined just to see what one could expect in return for the minimal effort and money required. To my astonishment, I received total $ 610,470.00 in 21 weeks, with money still coming in''. Pam Hedland, Fort Lee, New Jersey. ------------------------------------------------------------------------- Here is another testimonial: ''This program has been around for a long time but I never believed in it. But one day when I received this again in the mail I decided to gamble my $25 on it. I followed the simple instructions and walaa ..... 3 weeks later the money started to come in. First month I only made $240.00 but the next 2 months after that I made a total of $290,000.00. So far, in the past 8 months by re-entering the program,I have made over $710,000.00 and I am playing it again. The key to success in this program is to follow the simple steps and NOT change anything .'' More testimonials later but first, ****** PRINT THIS NOW FOR YOUR FUTURE REFERENCE ******* $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ If you would like to make at least $500,000 every 4 to 5 months easily and comfortably, please read the following...THEN READ IT AGAIN and AGAIN !!! $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ FOLLOW THE SIMPLE INSTRUCTION BELOW AND YOUR FINANCIAL DREAMS WILL COME TRUE, GUARANTEED! INSTRUCTIONS: **** Order all 5 reports shown on the list below. **** For each report, send $5 CASH, THE NAME & NUMBER OF THE REPORT YOU ARE ORDERING and YOUR E-MAIL ADDRESS to the person whose name appears ON THAT LIST next to the report. MAKE SURE YOUR RETURN ADDRESS IS ON YOUR ENVELOPE TOP LEFT CORNER in case of any mail problems. **** When you place your order, make sure you order each of the 5 reports. You will need all 5 reports so that you can save them on your computer and resell them. YOUR TOTAL COST $5 X 5 = $25.00. **** Within a few days you will receive, vie e-mail, each of the 5 reports from these 5 different individuals. Save them on your computer so they will be accessible for you to send to the 1,000's of people who will order them from you. Also make a floppy of these reports and keep it on your desk in case something happen to your computer. ****.IMPORTANT - DO NOT alter the names of the people who are listed next to each report, or their sequence on the list, in any way other than what is instructed below in step '' 1 through 6 '' or you will loose out on majority of your profits. Once you understand the way this works, you will also see how it does not work if you change it. Remember, this method has been tested, and if you alter, it will NOT work!!! People have tried to put their friends/relatives names on all five thinking they could get all the money. But it does not work this way. Believe us, we all have tried to be greedy and then nothing happened. So Do Not try to change anything other than what is instructed. Because if you do, it will not work for you. Remember, honesty reaps the reward!!! 1.. After you have ordered all 5 reports, take this advertisement and REMOVE the name & address of the person in REPORT # 5. This person has made it through the cycle and is no doubt counting their fortune. 2.... Move the name & address in REPORT # 4 down TO REPORT # 5. 3.... Move the name & address in REPORT # 3 down TO REPORT # 4. 4.... Move the name & address in REPORT # 2 down TO REPORT # 3. 5.... Move the name & address in REPORT # 1 down TO REPORT # 2 6.... Insert YOUR name & address in the REPORT # 1 Position. PLEASE MAKE SURE you copy every name & address ACCURATELY ! ========================================================= Take this entire letter, with the modified list of names, and save it on your computer. DO NOT MAKE ANY OTHER CHANGES. Save this on a disk as well just in case if you loose any data. To assist you with marketing your business on the internet, the 5 reports you purchase will provide you with invaluable marketing information which includes how to send bulk e-mails legally, where to find thousands of free classified ads and much more. There are 2 Primary methods to get this venture going: METHOD # 1 : BY SENDING BULK E-MAIL LEGALLY ============================================ let's say that you decide to start small, just to see how it goes, and we will assume You and those involved send out only 5,000 e-mails each. Let's also assume that the mailing receive only a 0.2% response (the response could be much better but lets just say it is only 0.2% . Also many people will send out hundreds of thousands e-mails instead of only 5,000 each). Continuing with this example, you send out only 5,000 e-mails. With a 0.2% response, that is only 10 orders for report # 1. Those 10 people responded by sending out 5,000 e-mail each for a total of 50,000. Out of those 50,000 e-mails only 0.2% responded with orders. That's = 100 people responded and ordered Report # 2. Those 100 people mail out 5,000 e-mails each for a total of 500,000 e-mails. The 0.2% response to that is 1000 orders for Report # 3. Those 1000 people send out 5,000 e-mails each for a total of 5 million e-mails sent out. The 0.2% response to that is 10,000 orders for Report # 4. Those 10,000 people send out 5,000 e-mails each for a total of 50,000,000 (50 million) e-mails. The 0.2% response to that is 100,000 orders for Report # 5. THAT'S 100,000 ORDERS TIMES $5 EACH = $500,000.00 (half million). Your total income in this example is: 1..... $50 + 2..... $500 + 3..... $5,000 + 4..... $50,000 + 5..... $500,000 ......... Grand Total = $555,550.00 NUMBERS DO NOT LIE. GET A PENCIL & PAPER AND FIGURE OUT THE WORST POSSIBLE RESPONSES AND NO MATTER HOW YOU CALCULATE IT, YOU WILL STILL MAKE A LOT OF MONEY ! ------------------------------------------------------------------------------ REMEMBER FRIEND, THIS IS ASSUMING ONLY 10 PEOPLE ORDERING OUT OF 5,000 YOU MAILED TO. Dare to think for a moment what would happen if everyone, or half or even one 4th of those people mailed 100,000 e-mails each or more? There are over 150 million people on the internet worldwide and counting. Believe me, many people will do just that, and more! METHOD # 2 : BY PLACING FREE ADS ON THE INTERNET =================================================== Advertising on the net is very very inexpensive and there are hundreds of FREE places to advertise. Placing a lot of free ads on the internet will easily get a larger response. We strongly suggest you start with Method # 1 and add METHOD # 2 as you go along. For every $5 you receive, all you must do is e-mail them the Report they ordered. That's it . Always provide same day service on all orders. This will guarantee that the e-mail they send out, with your name and address on it, will be prompt because they can not advertise until they receive the report. _____________________ AVAILABLE REPORTS_____________________ ORDER EACH REPORT BY ITS NUMBER & NAME ONLY. Notes: Always send $5 cash (U.S. CURRENCY) for each Report. Checks NOT accepted. Make sure the cash is concealed by wrapping it in atleast 2 sheets of paper. On one of those sheets of paper, Write the NUMBER & the NAME of the Report you are ordering, YOUR E-MAIL ADDRESS and your name and postal address. PLACE YOUR ORDER FOR THESE REPORTS NOW : ============================================== REPORT # 1 : ''The Insider's Guide to Advertising for Free on the Net'' Order Report # 1 from: Nancy Yager 19 C Crownview Terrace Hamburg, New York 14075 USA __________________________________________________ REPORT # 2 : ''The Insider's Guide to Sending Bulk e-mail on the Net'' Order Report # 2 from : Paul Bradley 1802 Red Canyon Rd. Canon City, CO 81212 U.S.A. __________________________________________________ REPORT # 3 : ''The Secret to Multilevel marketing on the net'' Order Report # 3 from: Al Andrade 18531 Mayall Street Unit-D Northridge, CA 91324 U.S.A. _________________________________________________ REPORT # 4 : ''How to become a millionaire utilizing MLM & the Net'' Order Report # 4 from: Arnold Larsen P.O. Box 17622 Sarasota, FL. 34276 U.S.A. ____________________________________________________ REPORT # 5 : ''HOW TO SEND 1 MILLION E-MAILS FOR FREE'' Order Report # 5 from: Alex Diamond 9903 Santa Monica Blvd; Apt. # 405 Beverly Hills, Ca 90212 U.S.A. $$$$$$$$$ YOUR SUCCESS GUIDELINES $$$$$$$$$$$ Follow these guidelines to guarantee your success: If you do not receive at least 10 orders for Report #1 within 2 weeks, continue sending e-mails until you do. After you have received 10 orders, 2 to 3 weeks after that you should receive 100 orders or more for REPORT # 2. If you did not, continue advertising or sending e-mails until you do. Once you have received 100 or more orders for Report # 2, YOU CAN RELAX, because the system is already working for you , and the cash will continue to roll in ! THIS IS IMPORTANT TO REMEMBER : Every time your name is moved down on the list, you are placed in front of a different report. You can KEEP TRACK of your PROGRESS by watching which report people are ordering from you. IF YOU WANT TO GENERATE MORE INCOME SEND ANOTHER BATCH OF E-MAILS AND START THE WHOLE PROCESS AGAIN. There is NO LIMIT to the income you can generate from this business !!! ____________________________________________________ FOLLOWING IS A NOTE FROM THE ORIGINATOR OF THIS PROGRAM: "You have just received information that can give you financial freedom for the rest of your life, with NO RISK and JUST A LITTLE BIT OF EFFORT. You can make more money in the next few weeks and months than you have ever imagined. Follow the program EXACTLY AS INSTRUCTED. Do Not change it in any way. It works exceedingly well as it is now. Remember to e-mail a copy of this exciting report after you have put your name and address in Report #1 and moved others to #2...........# 5 as instructed above. One of the people you send this to may send out 100,000 or more e-mails and your name will be on everyone of them. Remember though, the more you send out the more potential customers you will reach. So my friend, I have given you the ideas, information, materials and opportunity to become financially independent. IT IS UP TO YOU NOW ! ************** MORE TESTIMONIALS **************** '' My name is Mitchell. My wife , Jody and I live in Chicago. I am an accountant with a major U.S. Corporation and I make pretty good money. When I received this program I grumbled to Jody about receiving ''junk mail''. I made fun of the whole thing, spouting my knowledge of the population and percentages involved. I ''knew'' it wouldn't work. Jody totally ignored my supposed intelligence and few days later she jumped in with both feet. I made merciless fun of her, and was ready to lay the old ''I told you so'' on her when the thing didn't work. Well, the laugh was on me! Within 3 weeks she had received 50 responses. Within the next 45 days she had received a total of $ 147,200.00 all cash! I was shocked. I have joined Jody in her ''hobby''. Mitchell Wolf, M.D. , Chicago, Illinois ------------------------------------------------------------ '' Not being the gambling type, it took me several weeks to make up my mind to participate in this plan. But conservative that I am, I decided that the initial investment was so little that there was just no way that I wouldn't get enough orders to at least get my money back. I was surprised when I found my medium size post office box crammed with orders. I made $319,210.00 in the first 12 weeks. The nice thing about this deal is that it does not matter where people live. There simply isn't a better investment with a faster return and so big''. Dan Sondstrom, Alberta, Canada ----------------------------------------------------------- '' I had received this program before. I deleted it, but later I wondered if I should have given it a try. Of course, I had no idea who to contact to get another copy, so I had to wait until I was e-mailed again by someone else.........11 months passed then it luckily came again...... I did not delete this one! I made more than $490,000 on my first try and all the money came within 22 weeks''. Susan De Suza, New York, N.Y. ---------------------------------------------------- '' It really is a great opportunity to make relatively easy money with little cost to you. I followed the simple instructions carefully and within 10 days the money started to come in. My first month I made $ 20, 560.00 and by the end of third month my total cash count was $ 362,840.00. Life is beautiful, Thanx to internet''. Fred Dellaca, Westport, New Zealand ------------------------------------------------------------ ORDER YOUR REPORTS TODAY AND GET STARTED ON YOUR ROAD TO FINANCIAL FREEDOM ! ======================================================= If you have any questions of the legality of this program, contact the Office of Associate Director for Marketing Practices, Federal Trade Commission, Bureau of Consumer Protection, Washington, D.C. //////////////////////////////////////////////// ONE TIME MAILING, NO NEED TO REMOVE ////////////////////////////////////////////// This message is sent in compliance of the proposed bill SECTION 301. per Section 301, Paragraph (a)(2)(C) of S. 1618. Further transmission to you by the sender of this e-mail may be stopped at no cost to you by sending a reply to : Sophie530@email.com with the word Remove in the subject line. This message is not intended for residents in the State of Washington, screening of addresses has been done to the best of our technical ability. -------- T H E E N D --------- > > > > > From list@netscape.com Sun Feb 11 19:13:37 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id TAA13800 for ; Sun, 11 Feb 2001 19:13:37 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1C0BPj21560; Sun, 11 Feb 2001 16:11:25 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1C0BR228734; Sun, 11 Feb 2001 16:11:27 -0800 (PST) Resent-Date: Sun, 11 Feb 2001 16:11:27 -0800 (PST) Subject: You gotta check out these hilarious video clips! From: howling@mash4077.com Message-Id: <4r514w2.1nji0f1pl@excite.ccom> To: howling@mash4077.com Date: Sun, 11 Feb 2001 16:04:41 -0800 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 8BIT Resent-Message-ID: <"sl4Zv.A.pAH.toyh6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8BIT

> -----Original Message-----
> From: Phil Simms
> Sent: Tuesday, February 9, 2001 4:14 PM
> To: Barry Sanders
> Cc: Steve Hartman, Rhonda Smalley, Jimmy Ward, Big Dave, Dean Fletcher

> Subject: FW: -- 3 New Hilarious Video Clips and some more jokes.

> Joke Lovers,

> Here are the video clips*
>1.  Scratch & Sniff - Hilarious - you gotta see this one!!!
>2.  Grandma Scores - This one's Great. I don't know how they did it?
>3.  Try Throwing Rocks - The title says it all...

> Jokemeister

> Five Bucks -

> A man is walking around New York with his wife.
> They find a perfume shop, the wife goes in, and he waits outside.
> A hooker comes along and says to him, "Like to come home with me, buddy? "
> "For how much?" asks the man.
> "One hundred dollars," the hooker answers.
> "I'll give you five bucks," he replies.
> The hooker swears at him and walks away.
> A little later, the man's wife comes out of the shop and they continue their walk.
> As they round the corner, there stands the same hooker. She takes one look
> at the man and his wife and says, "HA!… see what you get for five bucks?"
>

> My Lying Wife

> "That wife of mine is a liar," said the angry husband to a sympathetic pal seated
> next to him in the bar.
> "How do you know?" the friend asked.
> "She didn't come home last night and when I asked her where she'd been, she
> said she had spent the night with her sister, Shirley."
> "So?"
> "So she's a liar… I spent the night with her sister Shirley."

> *Please Note - to view the video clips you may need to load Windows Media Player
> from Microsoft.
>

From list@netscape.com Sun Feb 11 20:14:35 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA14223 for ; Sun, 11 Feb 2001 20:14:34 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1C1CQj25104; Sun, 11 Feb 2001 17:12:26 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1C1CR609862; Sun, 11 Feb 2001 17:12:27 -0800 (PST) Resent-Date: Sun, 11 Feb 2001 17:12:27 -0800 (PST) Date: Sun, 11 Feb 2001 17:12:23 -0800 (PST) Message-Id: <200102120112.f1C1CNZ17771@xwing.netscape.com> To: winter@trippy.co.uk From: Subject: THE INTERNET SPY 2000!!! MIME-Version: 1.0 Content-Type: text/plain; charset=unknown-8bit Resent-Message-ID: <"icgE3B.A.tZC.5hzh6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com X-MIME-Autoconverted: from 8bit to quoted-printable by netscape.com id f1C1CQj25104 Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by ietf.org id UAA14223 THE NEW SPY Shows you how to get the facts on anyone. CONFIDENTIAL The SOFTWARE They Wanted BANNED In all 50 States! Why? Because these secrets were never intended to reach your eyes.... Get the facts on anyone using the Internet! Locate Missing Persons, find Lost Relatives, obtain Addresses and Phone Numbers of old school friends, even Skip Trace Dead Beat Spouses. This is not a Private Investigator, but a sophisticated SOFTWARE program DESIGNED to automatically CRACK YOUR CASE with links to thousands of Public record databases. Find out SECRETS about your relatives, friends, enemies, and everyone else! -- even your spouse! With the New INTERNET SPY AND YOU - 2000 It's absolutely astounding! Here's some of what you can learn: License plate numbers! Get anyone's name and address with just a license plate number! (Find that girl you met in traffic!) DRIVING RECORDS! Get anyone's driving record! Social security number! Trace anyone by social security number! ADDRESSES! Get anyone's address with just a name! Unlisted phone numbers! Get anyone's phone number with just a name-even unlisted numbers! LOCATE! Long lost friends, relatives, a past lover who broke your heart! Now with Full Internet Search. E-mail! Send anonymous e-mail completely untraceable! Dirty secrets! Discover dirty secrets your in-laws don't want you to know! Investigate anyone! Use the source that private investigators use (all on the Internet) secretly! Ex-spouse! Learn how to get information on an ex-spouse that will help you win in court! (Dig up old skeletons) Criminal search-Backround check! Find out about you daughters boyfriend! (or her husband) Neighbors! Learn all about your mysterious neighbors! Find out what they have to hide! People you work with! Be astonished by what you'll learn about people you work with! Education verification! Did he really graduate college? Find out! INTERNET SPY AND YOU 2000 Software will help you discover ANYTHING about anyone, with clickable hyperlinks and no typing in Internet addresses! Just insert our floppy disk and Go! It's INCREDIBLE what you can find out using Internet Spy and You 2000 and the Internet! You'll be riveted to your computer screen! The software they're trying to ban! Before it's too late! LIMITED TIME OFFER: ORDER TODAY! Only $15.00 US (Postage Paid) WORKS WITH ALL BROWSERS AND ALL VERSIONS OF AOL! ORDER TODAY: SEND Only $15.00 US (CASH, CHECK, OR MONEY ORDER) (ARIZONA RESIDENTS ADD 7% ARIZONA STATE SALES TAX) (ORDERS OUTSIDE THE USA, ADD $5.00 and must send US CASH, No checks, no money orders!) TO: N Groves PO BOX 3038 Gilbert, AZ 85299 (ALL ORDERS MAILED WITHIN 48 HOURS OF RECEIVING THEM) MAKE YOUR CHECK PAYABLE TO: N Groves (Please Print Clearly Your Name and Address) Name__________________________________________ Address________________________________________ City/State/ZIP___________________________________ E-mail Address__________________________________ SORRY NO MAC VERSION AVAILABLE AT THIS TIME. THIS PROGRAM WILL NOT WORK WITH M/S 3.11 AND OLDER. Copyright © 1998-1999 All Rights Reserved ********************************************************************** All REMOVE requests AUTOMATICALLY honored upon receipt. PLEASE understand that any effort to disrupt, close or block this REMOVE account can only result in difficulties for others wanting to be removed from our mailing list as it will be impossible to take anyone off the list if the remove instruction can not be received. To be removed from our mailing list please send an email to: sjoe@unbounded.com and place remove in the subject Thank you ********************************************************* From list@netscape.com Mon Feb 12 18:48:08 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id SAA23998 for ; Mon, 12 Feb 2001 18:48:07 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1CNjAH01338; Mon, 12 Feb 2001 15:45:10 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1CNjBI22959; Mon, 12 Feb 2001 15:45:11 -0800 (PST) Resent-Date: Mon, 12 Feb 2001 15:45:11 -0800 (PST) Message-Id: <5.0.2.1.0.20010212153214.00a49ca0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Mon, 12 Feb 2001 15:44:52 -0800 To: "Jim Sermersheim" From: "Kurt D. Zeilenga" Subject: Dupent subtype example Cc: ietf-ldapext@netscape.com In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"_lVG0C.A.XmF.GWHi6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Jim, I'm thinking the I-D needs an example dealing with subtyping. If I read the I-D correctly, I note that requesting "name" has different semantics than requesting each subtype of "name" (I believe this is a good thing). 5.2 could be modified such that user1 was: dn: cn=User One,dc=example,dc=net cn: User One mail: user1@example.net dn: cn=User Two,dc=example,dc=net cn: User2 givenName: User mail: user2@example.net mail: usertwo@example.net and both "name" and "mail" where specified in the control. dn: cn=User One,dc=example,dc=net cn: User One control: 2.16.840.1.113719.1.27.101.2 dn: cn=User One,dc=example,dc=net mail: user1@example.net control: 2.16.840.1.113719.1.27.101.2 dn: cn=User Two,dc=example,dc=net cn: User2 mail: user2@example.net control: 2.16.840.1.113719.1.27.101.2 dn: cn=User Two,dc=example,dc=net cn: User2 mail: usertwo@example.net control: 2.16.840.1.113719.1.27.101.2 dn: cn=User Two,dc=example,dc=net givenName: User mail: usertwo@example.net control: 2.16.840.1.113719.1.27.101.2 dn: cn=User Two,dc=example,dc=net givenName: User mail: user2@example.net control: 2.16.840.1.113719.1.27.101.2 From list@netscape.com Tue Feb 13 11:06:10 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id LAA22869 for ; Tue, 13 Feb 2001 11:06:09 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1DG4bb18436; Tue, 13 Feb 2001 08:04:37 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1DG4aA03589; Tue, 13 Feb 2001 08:04:36 -0800 (PST) Resent-Date: Tue, 13 Feb 2001 08:04:36 -0800 (PST) Message-Id: <5.0.2.1.0.20010213074858.00a958d0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Tue, 13 Feb 2001 08:04:20 -0800 To: jimse@novell.com From: "Kurt D. Zeilenga" Subject: dupent and filter evaluation Cc: ietf-ldapext@netscape.com Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"qRfu_C.A.t3.TsVi6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Jim, In reading dupent I-D, I find it unclear as to whether the control is to be applies to all entries within the DIT and then filtered OR applied to the set of entries matched by the search filter (and other factors). The latter makes most sense to me. Certainly the filter should not be applied before and after applying the control (though this would be useful if we didn't have matched values control). I suggest adding some note stating the control is applied to only entries matched by the filter (and other factors) and the filter is not reapplied to duplicated entries. I also suggest rewording the examples to indicate that the set of listed entries are the "matched" entries within the DIT, not the all the entries within the DIT. You might alter the DNs so they were not in the same container (which hints that they are a subset of the entries within the DIT). Kurt From list@netscape.com Tue Feb 13 19:09:11 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id TAA02981 for ; Tue, 13 Feb 2001 19:09:11 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1E07Cb07333; Tue, 13 Feb 2001 16:07:12 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1E07Dc07356; Tue, 13 Feb 2001 16:07:13 -0800 (PST) Resent-Date: Tue, 13 Feb 2001 16:07:13 -0800 (PST) Date: Wed, 14 Feb 2001 08:14:25 +0800 From: mb64@asean-mail.com Message-Id: <200102140014.IAA02291@jc.sx.cei.gov.cn> To: Subject: ADV: Search Engine Placement MIME-Version: 1.0 Content-Type: text/plain; charset=unknown-8bit Resent-Message-ID: <"uB_G8C.A.gyB.vwci6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Removal instructions below. I saw your listing on the internet. I work for a company that specializes in getting clients web sites listed as close to the top of the major search engines as possible. Our fee is only $29.95 per month to submit your site at least twice a month to over 350 search engines and directories. To get started and put your web site in the fast lane, call our toll free number below. Mike Bender 888-532-8842 To be removed call: 888-800-6339 X1377 From list@netscape.com Tue Feb 13 22:18:54 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id WAA05863 for ; Tue, 13 Feb 2001 22:18:54 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1E3Gpb06679; Tue, 13 Feb 2001 19:16:51 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1E3GqM23798; Tue, 13 Feb 2001 19:16:52 -0800 (PST) Resent-Date: Tue, 13 Feb 2001 19:16:52 -0800 (PST) Message-ID: <3A89F61D.333D8ED8@one.net> From: Tony Vallone X-Mailer: Mozilla 4.73 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 To: ietf-ldapext@netscape.com Subject: (no subject) References: Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Tue, 13 Feb 2001 22:16:31 -0500 Resent-Message-ID: <"U2hOkD.A.ezF.jifi6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit unsubscribe From list@netscape.com Wed Feb 14 07:49:05 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id HAA26817 for ; Wed, 14 Feb 2001 07:49:05 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1ECkvH18606; Wed, 14 Feb 2001 04:46:57 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1ECkvw04205; Wed, 14 Feb 2001 04:46:57 -0800 (PST) Resent-Date: Wed, 14 Feb 2001 04:46:57 -0800 (PST) Date: Wed, 14 Feb 2001 04:46:44 -0800 (PST) Message-Id: <200102141246.f1ECkiZ18318@xwing.netscape.com> From: diqod@hotmail.com To: hehob@Netlinefriends.netscape.com Reply-To: t2m20@bigfoot.com Subject: "BreakFree" from Government Control/Interference! [fahtz] Resent-Message-ID: <"ncZ4yC.A.QBB.A5ni6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com AMERICANS: BreakFree from Government Control/Interference! ====================================================== The GOVERNMENT thinks it OWNS you! It thinks YOU are its PROPERTY! You can BREAK their grip on you, and TAKE CONTROL of yourself and your property (including earnings) -- so they can NEVER confiscate ANY of it, ever again! You can learn how to: * FORCE the IRS to pay any tax liabilities FOR you! * HALT Mortgage Foreclosures! * STOP Credit Card liens! * KILL Lawsuits! * TAKE CONTROL of any trial and force the Judge to give YOU the Order of the Court. * and, much, much more! Take CHARGE and turn EVERYTHING they use to come against you -- AROUND -- and make it work against THEM! Learn how to take control and power over your life (and those who would come in opposition against you) in ways that you've never even dreamed about. To learn more, put "BreakFree" in the Subject. mailto:tm23@bigfoot.com?subject=BreakFree Please Note... Should this email address be down. Please "Fax" your response instead, with your name__, email address___, and the words "Send BreakFree Info" to: 305-425-3205. Have a Great Day! "A Wise Person Investigates What a Fool Person Takes For Granted" PS: To be removed from the list, just put "Remove" in subject line and send. From list@netscape.com Wed Feb 14 08:57:54 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id IAA28805 for ; Wed, 14 Feb 2001 08:57:53 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1EDthb27752; Wed, 14 Feb 2001 05:55:43 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1EDtkE20459; Wed, 14 Feb 2001 05:55:46 -0800 (PST) Resent-Date: Wed, 14 Feb 2001 05:55:46 -0800 (PST) Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8BIT To: mail@netscape.com Date: Wed, 14 Feb 2001 06:39:59 +0000 Message-Id: <61bt5b33oa8x1sah.2k406kas4u5db@dialup03.188.net> Subject: Discount Airfare From: deliver07@163.net Resent-Message-ID: <"KoU_VC.A.R_E.g5oi6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8BIT Looking for some great deals on vacation packages? Your fantasy trip is at your fingertips!!! We have airfare available to Hawaii for as low as $69.00 per person flying on major airlines. We also offer excellent savings on other air and hotel packages, including fabulous Las Vegas. For more information, call (702) 862-8515 between 9am to 5pm PST, Monday through Friday. Certain packages are limited, so don't delay. Give us a try and what we have to offer. From list@netscape.com Wed Feb 14 20:29:24 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA20292 for ; Wed, 14 Feb 2001 20:29:23 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1F1Qfb05853; Wed, 14 Feb 2001 17:26:41 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1F1Qgs15372; Wed, 14 Feb 2001 17:26:42 -0800 (PST) Resent-Date: Wed, 14 Feb 2001 17:26:42 -0800 (PST) Message-Id: <200102150126.f1F1QZ314818@ywing.netscape.com> From: "Peter" To: Subject: Immediate Downline - 1000 Members Per Month - IT'S FREE!! Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Thu, 15 Feb 2001 03:25:42 Resent-Message-ID: <"ynl2JC.A.wvD.QBzi6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com CHECK IT OUT! IT'S FREE! 1000 MEMBERS A MONTH!! Get yourself an IMMEDIATE DOWNLINE!! All new members that come into the club COMPANY WIDE will go under YOU A true VERTICAL downline. You can easily get 1000 members or MORE under YOU in a month! How would you like a GUARANTEED minimum commission every month? JOIN FREE!!!!!!! JOIN FREE!!!!!!! Join our FREE postlaunch programme- You'll then be forwarded on to our main website where you can watch your downline grow right before your eyes! Get started today and watch what happens! For your FREE member number, kindly reply with FULL First name and Last name! We will then forward your FREE member number to you!! ------------------------------------------------------------------------------------- You are receiving this message because my records indicate you are open to receiving information on business opportunities. If this has reached you in error, please accept my humblest apologies and reply with "remove" in the subject line. Thanks and many prosperous blessings to you! -------------------------------------------------------------------------------------- From list@netscape.com Wed Feb 14 20:36:15 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA20381 for ; Wed, 14 Feb 2001 20:36:14 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1F1YRb08034; Wed, 14 Feb 2001 17:34:27 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1F1YSo21030; Wed, 14 Feb 2001 17:34:28 -0800 (PST) Resent-Date: Wed, 14 Feb 2001 17:34:28 -0800 (PST) Message-Id: <5.0.2.1.0.20010214170548.00a6f4b0@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Wed, 14 Feb 2001 17:33:17 -0800 To: ietf-ldapext@netscape.com From: Bruce Greenblatt Subject: ACL Model and application defined permission Cc: estokes@tivoli.com, blakley@tivoli.com, djbrink@us.ibm.com, rbyrne@france.sun.com Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"zq1ERC.A.OIF.jIzi6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com As I understand it, in the current ACL Model draft, the kinds of permissions that an LDAP server understands are limited to those defined in clause 4.1.1. Is this accurate? The reason that I ask, is that I would like to store application defined permissions as well. For example, I have an application the allows users to perform several different actions on various types of objects. Let's call these objects foo objects, and the actions foo-1 through foo-n. None of these correspond to the add, delete, export, etc. permissions defined in clause 4.1.1. I would like to be able to have a ACI assigned to an entry that represents a foo object that grants permissions to perform some foo-i actions to some list of subject entries (i.e. users, groups, organizationalUnits, domainContexts, etc.). Can I grant these permissions with the mechanisms currently defined in the ACL Model draft. My presumption is that this would require a new permission level, but I don't see how to shoe-horn this in to the BNF of 4.1.1 or the ASN.1 of 4.1.2. I would also like to be able to verify that a subject entry has the appropriate rights to perform an operation against a specified object. How is this supposed to work in the existing model? Either the effective rights control or extended operation ought to be able to work for this, but the definitions are confusing to me. There should be a new clause 11.1.4 that gives a specific example of a Search request with the control that shows how to do permission verification. Similarly, there should be a new clause 12.2 that gives a specific example of the use of the extended operation. I'd note that in both of these cases, there ought to be a way for the LDAP client to list out the permissions in which it is interested. I'd also like to be able to find all of the entries in a specified scope to which a specified user has permission to perform action foo. I'm guessing that I'm supposed to use the effective rights control for this, but without the example, I'm at a loss as to how to build the search and the control appropriately. Overall, the model appears to be very close to meeting the requirements for application defined permissions. Thanks, Bruce Greenblatt From list@netscape.com Wed Feb 14 22:22:42 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id WAA22868 for ; Wed, 14 Feb 2001 22:22:42 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1F3KaH23704; Wed, 14 Feb 2001 19:20:36 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1F3Kbs00084; Wed, 14 Feb 2001 19:20:37 -0800 (PST) Resent-Date: Wed, 14 Feb 2001 19:20:37 -0800 (PST) Date: Wed, 14 Feb 2001 19:20:33 -0800 (PST) Message-Id: <200102150320.f1F3KW321110@ywing.netscape.com> From: cashgenerator2002@yahoo.com To: @netscape.com Subject: HEALING VISUALIZATIONS!! Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"vMQJJ.A.x.Es0i6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit AMAZING RESULTS! Create health and healing through Guided Imagery. Overcome ANY illness or injury! Click "reply" for complete details. From list@netscape.com Thu Feb 15 02:08:46 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id CAA10820 for ; Thu, 15 Feb 2001 02:08:45 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1F75dH08677; Wed, 14 Feb 2001 23:05:39 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1F75f623764; Wed, 14 Feb 2001 23:05:41 -0800 (PST) Resent-Date: Wed, 14 Feb 2001 23:05:41 -0800 (PST) Date: Thu, 15 Feb 2001 14:52:16 +0800 (CST) From: Message-Id: <200102150652.OAA0000016687@galaxy.cghn.com> To: jenny1@businessweekmail.com Subject: How You Can Make $750 your first week with Newbies! Resent-Message-ID: <"cQSRjC.A.6yF.D_3i6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com ====================================================================== Opt In Club Opportunities Help stamp out spam by going Opt In. ====================================================================== ============================== I made $750 my first week with Newbies! ============================== The NEWBIE GUIDE is Fantastic!! Not since the days of CETC, Cookie Cutter, or ReferEveryone have we seen such an explosion! I seriously made $750 my first week with Newbies! And YOU can make money, too! Mailto:NewbieMoney2@newmail.net * One-time fee of $49.95 * NOT MLM * YOU make 100% of the $49.95 sale * Especially tailored to Beginners * Complete Marketing Tools available * Access to Merchant Account * The HTML creator and AD tracker were worth the entire $49.95 to me! - Act NOW - Newbies will help you achieve your online financial goals for 2001! Send Email Now To: Mailto:NewbieMoney2@newmail.net ====================================================================== To be unsubscribe from future mailings, click the link mailto:unsubscribe201@newmail.net ====================================================================== From list@netscape.com Thu Feb 15 04:49:44 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id EAA12019 for ; Thu, 15 Feb 2001 04:49:42 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1F9leb18901; Thu, 15 Feb 2001 01:47:40 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1F9lgI00036; Thu, 15 Feb 2001 01:47:42 -0800 (PST) Resent-Date: Thu, 15 Feb 2001 01:47:42 -0800 (PST) Message-ID: <335970594.982229724401.JavaMail.root@www3usaw.prod.e247.com> Date: Thu, 15 Feb 2001 09:35:24 +0000 (GMT+00:00) From: mit2 mit2 <2mit2@e247.com> Reply-To: 2mit2@e247.com To: mit2@e247.com Subject: FREE Site submission software + fantastic Income opportunity Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"_hvk0.A.L.8W6i6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit ---- Hi I would like to send you info on our FREE Promotion software - Submit Your Website URL & to OVER 7304 sites for FREE! For more info and to receive the download URL for the free software send a blank email to: mit1@bigfoot.com Regards David Get your free e24/7 email at http://www.e247.com Send & receive large files with 100MB of storage From list@netscape.com Thu Feb 15 09:22:35 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id JAA18136 for ; Thu, 15 Feb 2001 09:22:35 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1FEIoH08673; Thu, 15 Feb 2001 06:18:50 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1FEIoY07498; Thu, 15 Feb 2001 06:18:50 -0800 (PST) Resent-Date: Thu, 15 Feb 2001 06:18:50 -0800 (PST) Sender: Robert.Byrne@france.Sun.COM Message-ID: <3A8BE557.6535A170@france.sun.com> Date: Thu, 15 Feb 2001 15:19:03 +0100 From: Rob Byrne Organization: Sun Microsystems X-Mailer: Mozilla 4.7 [en] (X11; I; SunOS 5.6 sun4u) X-Accept-Language: en MIME-Version: 1.0 To: Bruce Greenblatt CC: ietf-ldapext@netscape.com, estokes@tivoli.com, blakley@tivoli.com, djbrink@us.ibm.com Subject: Re: ACL Model and application defined permission References: <5.0.2.1.0.20010214170548.00a6f4b0@pop.walltech.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"aSvSJ.A.w0B.IV-i6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Bruce Greenblatt wrote: > > As I understand it, in the current ACL Model draft, the kinds of > permissions that an LDAP server understands are limited to those defined in > clause 4.1.1. Is this accurate? The reason that I ask, is that I would Hi Bruce, That's the way it's written right now. I agree that the idea of having an extensible access control model is very attractive. The reason is that we could all then be legitimately claim to be running version 1.0, say, of the LDAP access control model...but with our own little tweaks. It would also hopefully allow writers of new LDAP extended operations and controls to define the required permissions for their new stuff without having to ramp the version number of the LDAP access control model. I started to work on this idea but haven't had time to get it in a reviewable state...basically the idea would be to allow the permission list to be extended and in addition to allow an extended permission to have some "extended fields" associated with it which would contain any data that the permission required. The problem is of course, what happens if you send an aci with extended stuff to another server that doesn't support it...reject it...? OK, but that's a big pain for replication...Ok, publish the "supported extended permissions" in the rootDSE and make it part of the replication agreement that both servers check they support the same stuff...I'm just giving you an idea of the things we need to think about to get an extensible model to work. It's conceivable that it would be too much work for this pass of the draft. > like to store application defined permissions as well. For example, I have > an application the allows users to perform several different actions on > various types of objects. Let's call these objects foo objects, and the > actions foo-1 through foo-n. None of these correspond to the add, delete, > export, etc. permissions defined in clause 4.1.1. I would like to be able > to have a ACI assigned to an entry that represents a foo object that grants > permissions to perform some foo-i actions to some list of subject entries > (i.e. users, groups, organizationalUnits, domainContexts, etc.). Can I > grant these permissions with the mechanisms currently defined in the ACL > Model draft. My presumption is that this would require a new permission > level, but I don't see how to shoe-horn this in to the BNF of 4.1.1 or the > ASN.1 of 4.1.2. > > I would also like to be able to verify that a subject entry has the > appropriate rights to perform an operation against a specified object. How > is this supposed to work in the existing model? Either the effective > rights control or extended operation ought to be able to work for this, but > the definitions are confusing to me. There should be a new clause 11.1.4 Agree 100%...I started working on clarifying these...again...not done. I think I agree with the spirit of what you want to do here but I don't think for example you need to be able to specify the action "foo" when you ask for the effective rights...I think it's easier to specify the user, the object and get all the rights back--the requestor can then check to see if "foo" happens to be in there. Anyway, that's kind of a detail. One thing I was hoping to do was drop the extended operation entirely and just have the control...I think you can do everything you want with a control if you get it right. Rob. > that gives a specific example of a Search request with the control that > shows how to do permission verification. Similarly, there should be a new > clause 12.2 that gives a specific example of the use of the extended > operation. I'd note that in both of these cases, there ought to be a way > for the LDAP client to list out the permissions in which it is interested. > > I'd also like to be able to find all of the entries in a specified scope to > which a specified user has permission to perform action foo. I'm guessing > that I'm supposed to use the effective rights control for this, but without > the example, I'm at a loss as to how to build the search and the control > appropriately. > > Overall, the model appears to be very close to meeting the requirements for > application defined permissions. > > Thanks, > > Bruce Greenblatt From list@netscape.com Thu Feb 15 12:03:03 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA23380 for ; Thu, 15 Feb 2001 12:03:03 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1FH1QH27090; Thu, 15 Feb 2001 09:01:26 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1FH1Qo11445; Thu, 15 Feb 2001 09:01:26 -0800 (PST) Resent-Date: Thu, 15 Feb 2001 09:01:26 -0800 (PST) Sender: lsbart35@mears.indy.cr.irs.gov Message-ID: <3A8C0B2D.7487A73B@parnelli.indy.cr.irs.gov> Date: Thu, 15 Feb 2001 12:00:29 -0500 From: "Larry S. Bartz" X-Mailer: Mozilla 4.72 [en] (X11; U; Linux 2.2.14-5.0smp i686) X-Accept-Language: en MIME-Version: 1.0 To: Rob Byrne CC: Bruce Greenblatt , ietf-ldapext@netscape.com, estokes@tivoli.com, blakley@tivoli.com, djbrink@us.ibm.com, IETF Policy WG LIST Subject: Re: ACL Model and application defined permission References: <5.0.2.1.0.20010214170548.00a6f4b0@pop.walltech.com> <3A8BE557.6535A170@france.sun.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"gfBvRD.A.uxC.ktAj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit The early ACL Model drafts proposed to support a functionality similar to what Bruce describes. The ACL element was called "use", and was meant to provide an indication of authorization to access or exercise the targeted object or resource. Subsequent discussions in ldapext revealed objections. Some argued that the issue was simply out of scope, that the model should focus solely on Directory operations. Others asserted that attempting to support such functionality in the ACL Model amounted to the first step down a slippery slope of extreme complexity. Consensus (at that time) resolved that the ACL Model should be limited to supporting Directory operations. As a consequence, the "use" term and its intended functionality disappeared from the ACL Model drafts. This is a Good Thing. The ACL Model should be limited to support of Directory operations. This is not to say that the Directory shouldn't be involved in supporting access, authorization, and usage decisions for entities which are external to the Directory. Analysis in other venues (such as DMTF's CIM and IETF's Policy WG) has revealed that authorization is a much larger question than can be supported by a binary "go/no-go" indicator. Network resources, distributed objects, and applications require a richer information model. The Directory is the place to do it, but the ACL Model is not the way to do it. Policy is the way to go. Rob Byrne wrote: > > Bruce Greenblatt wrote: > > > > As I understand it, in the current ACL Model draft, the kinds of > > permissions that an LDAP server understands are limited to those defined in > > clause 4.1.1. Is this accurate? The reason that I ask, is that I would > > Hi Bruce, > > That's the way it's written right now. I agree that the idea of having > an extensible access control model is very attractive. The reason is > that we could all then be legitimately claim to be running version 1.0, > say, of the LDAP access control model...but with our own little tweaks. > It would also hopefully allow writers of new LDAP extended operations > and controls to define the required permissions for their new stuff > without having to ramp the version number of the LDAP access control > model. I started to work on this idea but haven't had time to get it in > a reviewable state...basically the idea would be to allow the permission > list to be extended and in addition to allow an extended permission to > have some "extended fields" associated with it which would contain any > data that the permission required. The problem is of course, what > happens if you send an aci with extended stuff to another server that > doesn't support it...reject it...? OK, but that's a big pain for > replication...Ok, publish the "supported extended permissions" in the > rootDSE and make it part of the replication agreement that both servers > check they support the same stuff...I'm just giving you an idea of the > things we need to think about to get an extensible model to work. It's > conceivable that it would be too much work for this pass of the draft. > > > like to store application defined permissions as well. For example, I have > > an application the allows users to perform several different actions on > > various types of objects. Let's call these objects foo objects, and the > > actions foo-1 through foo-n. None of these correspond to the add, delete, > > export, etc. permissions defined in clause 4.1.1. I would like to be able > > to have a ACI assigned to an entry that represents a foo object that grants > > permissions to perform some foo-i actions to some list of subject entries > > (i.e. users, groups, organizationalUnits, domainContexts, etc.). Can I > > grant these permissions with the mechanisms currently defined in the ACL > > Model draft. My presumption is that this would require a new permission > > level, but I don't see how to shoe-horn this in to the BNF of 4.1.1 or the > > ASN.1 of 4.1.2. > > > > I would also like to be able to verify that a subject entry has the > > appropriate rights to perform an operation against a specified object. How > > is this supposed to work in the existing model? Either the effective > > rights control or extended operation ought to be able to work for this, but > > the definitions are confusing to me. There should be a new clause 11.1.4 > > Agree 100%...I started working on clarifying these...again...not done. > I think I agree with the spirit of what you want to do here but I don't > think for example you need to be able to specify the action "foo" when > you ask for the effective rights...I think it's easier to specify the > user, the object and get all the rights back--the requestor can then > check to see if "foo" happens to be in there. Anyway, that's kind of a > detail. > One thing I was hoping to do was drop the extended operation entirely > and just have the control...I think you can do everything you want with > a control if you get it right. > > Rob. > > > that gives a specific example of a Search request with the control that > > shows how to do permission verification. Similarly, there should be a new > > clause 12.2 that gives a specific example of the use of the extended > > operation. I'd note that in both of these cases, there ought to be a way > > for the LDAP client to list out the permissions in which it is interested. > > > > I'd also like to be able to find all of the entries in a specified scope to > > which a specified user has permission to perform action foo. I'm guessing > > that I'm supposed to use the effective rights control for this, but without > > the example, I'm at a loss as to how to build the search and the control > > appropriately. > > > > Overall, the model appears to be very close to meeting the requirements for > > application defined permissions. > > > > Thanks, > > > > Bruce Greenblatt -- #::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::| # Larry Bartz | | # lbartz@parnelli.indy.cr.irs.gov | Ooo, ooo, | # | Ooo, ooo, oooooo! | # | I've got a gnu attitude! | # voice (317) 226-7060 | | # FAX (317) 226-6378 | | #::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::| From list@netscape.com Thu Feb 15 12:47:09 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA25219 for ; Thu, 15 Feb 2001 12:47:08 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1FHivb10053; Thu, 15 Feb 2001 09:44:57 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1FHivc18367; Thu, 15 Feb 2001 09:44:57 -0800 (PST) Resent-Date: Thu, 15 Feb 2001 09:44:57 -0800 (PST) Message-Id: <5.0.2.1.0.20010215093320.00a89660@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Thu, 15 Feb 2001 09:40:43 -0800 To: Rob Byrne From: Bruce Greenblatt Subject: Re: ACL Model and application defined permission Cc: ietf-ldapext@netscape.com, estokes@tivoli.com, blakley@tivoli.com, djbrink@us.ibm.com In-Reply-To: <3A8BE557.6535A170@france.sun.com> References: <5.0.2.1.0.20010214170548.00a6f4b0@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"hH6xfC.A.jeE.XWBj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 03:19 PM 2/15/2001 +0100, Rob Byrne wrote: >Bruce Greenblatt wrote: > > > > As I understand it, in the current ACL Model draft, the kinds of > > permissions that an LDAP server understands are limited to those defined in > > clause 4.1.1. Is this accurate? The reason that I ask, is that I would > >Hi Bruce, > >That's the way it's written right now. I agree that the idea of having >an extensible access control model is very attractive. The reason is >that we could all then be legitimately claim to be running version 1.0, >say, of the LDAP access control model...but with our own little tweaks. >It would also hopefully allow writers of new LDAP extended operations >and controls to define the required permissions for their new stuff >without having to ramp the version number of the LDAP access control >model. I started to work on this idea but haven't had time to get it in >a reviewable state...basically the idea would be to allow the permission >list to be extended and in addition to allow an extended permission to >have some "extended fields" associated with it which would contain any >data that the permission required. The problem is of course, what >happens if you send an aci with extended stuff to another server that >doesn't support it...reject it...? OK, but that's a big pain for >replication...Ok, publish the "supported extended permissions" in the >rootDSE and make it part of the replication agreement that both servers >check they support the same stuff...I'm just giving you an idea of the >things we need to think about to get an extensible model to work. It's >conceivable that it would be too much work for this pass of the draft. > Thanks for the thoughtful response. I think that a simple extension to the existing BNF/ASN.1 could support this. As long as it is kept simple, there would be no reason for this to be a "real extension" that needs to be published in the rootDSE. All server would have to support the application defined permissions, just as much as they support the read, write, etc. permissions that are defined in the current model. I will write up a proposal today, and send it out. This feature would be of enormous value to builders of LDAP enabled applications. The notions of groups, aliases, organizational units, etc. are very powerful mechanisms, and being able to combine them with rights evaluation is an extremely compelling feature that is not available elsewhere. Bruce Bruce ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Thu Feb 15 12:47:23 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA25232 for ; Thu, 15 Feb 2001 12:47:22 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1FHjAH04707; Thu, 15 Feb 2001 09:45:10 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1FHjAI18607; Thu, 15 Feb 2001 09:45:10 -0800 (PST) Resent-Date: Thu, 15 Feb 2001 09:45:10 -0800 (PST) Message-Id: <5.0.2.1.0.20010215092438.00a86650@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Thu, 15 Feb 2001 09:44:05 -0800 To: "Larry S. Bartz" , Rob Byrne From: Bruce Greenblatt Subject: Re: ACL Model and application defined permission Cc: ietf-ldapext@netscape.com, estokes@tivoli.com, blakley@tivoli.com, djbrink@us.ibm.com, IETF Policy WG LIST In-Reply-To: <3A8C0B2D.7487A73B@parnelli.indy.cr.irs.gov> References: <5.0.2.1.0.20010214170548.00a6f4b0@pop.walltech.com> <3A8BE557.6535A170@france.sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"CZnCtC.A.shE.jWBj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 12:00 PM 2/15/2001 -0500, Larry S. Bartz wrote: >The ACL Model should be limited to support of >Directory operations. This is not to say that the Directory shouldn't >be involved in supporting access, authorization, and usage decisions for >entities which are external to the Directory. > Larry, I couldn't disagree more. What you fail to mention, is that ALL entities are external to the directory. The information that is stored in the directory is a partial representation of an external entity. For example, there are many more attributes of a user than are stored in the directory. Why are users, organizations, file servers, etc. internal to a directory, and a book or a hat external to the directory? There is no obvious reason, because the directory is just keeping track certain properties of these entities. The more information that is kept in the directory,the more valuable it is. Bruce > > ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Thu Feb 15 13:24:24 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA26537 for ; Thu, 15 Feb 2001 13:24:24 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1FIMJb19249; Thu, 15 Feb 2001 10:22:19 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1FIMJ209562; Thu, 15 Feb 2001 10:22:19 -0800 (PST) Resent-Date: Thu, 15 Feb 2001 10:22:19 -0800 (PST) X-Authentication-Warning: t20.catalogix.se: roland set sender to roland@catalogix.se using -f Date: Thu, 15 Feb 2001 20:13:20 +0100 From: Roland Hedberg To: ietf-ldapext@netscape.com Subject: IETF 50 meeting Message-ID: <20010215201320.B9646@catalogix.se> Mail-Followup-To: Roland Hedberg , ietf-ldapext@netscape.com Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i Resent-Message-ID: <"Jt9I6B.A.jUC.Y5Bj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Hi guys, Just to let you know: presently our meeting is booked to be on the first afternoon session on monday. MONDAY, March 19, 2001 1300-1500 Afternoon Sessions I APP ldapext LDAP Extension WG GEN ccamp Common Control and Measurement Plane WG INT ipcdn IP over Cable Data Network WG OPS disman Distributed Management WG OPS ngtrans Next Generation Transition WG TSV sip Session Initiation Protocol WG USV uswg User Services WG -- Roland ------------------------------------------------- Jegerveien 25 Telephone: +47 23 08 29 96 0777 Oslo Mobile(NO): +47 90 66 44 52 Norway Mobile(SE): +46 70 52 04 20 3 From list@netscape.com Thu Feb 15 14:13:24 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA27801 for ; Thu, 15 Feb 2001 14:13:24 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1FJBvb01335; Thu, 15 Feb 2001 11:11:57 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1FJBvc08826; Thu, 15 Feb 2001 11:11:57 -0800 (PST) Resent-Date: Thu, 15 Feb 2001 11:11:57 -0800 (PST) Sender: lsbart35@mears.indy.cr.irs.gov Message-ID: <3A8C29CF.8D4F6767@parnelli.indy.cr.irs.gov> Date: Thu, 15 Feb 2001 14:11:11 -0500 From: "Larry S. Bartz" X-Mailer: Mozilla 4.72 [en] (X11; U; Linux 2.2.14-5.0smp i686) X-Accept-Language: en MIME-Version: 1.0 To: Bruce Greenblatt CC: Rob Byrne , ietf-ldapext@netscape.com, estokes@tivoli.com, blakley@tivoli.com, djbrink@us.ibm.com, IETF Policy WG LIST Subject: Re: ACL Model and application defined permission References: <5.0.2.1.0.20010214170548.00a6f4b0@pop.walltech.com> <3A8BE557.6535A170@france.sun.com> <5.0.2.1.0.20010215092438.00a86650@pop.walltech.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"eSWaAB.A.zIC.6nCj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Bruce Greenblatt wrote: > > At 12:00 PM 2/15/2001 -0500, Larry S. Bartz wrote: > > >The ACL Model should be limited to support of > >Directory operations. This is not to say that the Directory shouldn't > >be involved in supporting access, authorization, and usage decisions for > >entities which are external to the Directory. > > > > Larry, > > I couldn't disagree more. What you fail to mention, is that ALL entities > are external to the directory. The information that is stored in the > directory is a partial representation of an external entity. For example, > there are many more attributes of a user than are stored in the > directory. Why are users, organizations, file servers, etc. internal to a > directory, and a book or a hat external to the directory? There is no > obvious reason, because the directory is just keeping track certain > properties of these entities. The more information that is kept in the > directory,the more valuable it is. > > Bruce > Bruce, I agree with your assertion regarding the difference between an object and the representation of an object in the Directory. My bad. I shouldn't have used a double negative in the sentence which you quoted above. Restated, "The Directory should be involved in supporting access, authorization, and usage decisions for entities which are external to the Directory." We agree to that, I think. I also agree that the value of the Directory is proportional to the information it contains. Further, I agree that the Directory is a natural platform for associating principals and services, consumers and suppliers, for convenience and/or in support of security goals. I disagree with your suggestion that the scope of the ACL Model should be extended. The ACL is the place to manage access to the Directory representation, the motes of data which comprise the Directory itself. The ACL Model is scoped to manage access of Directory operations, Directory CRUD. The ACL Model should stay in scope. This very issue was discussed by several participants in ldapext in the spring and summer of 1998, and maybe again later. The discussion was initiated by those who objected to the "use" term (and its intended functionality) of the original and early ACL Model drafts. The outcome, the result of those discussions, was the focused and purposeful scope of the current ACL Model. Users, organizations, file servers, books, hats, and whatever else can be represented in the Directory, but they are not a part of the ACL Model. By the same token, Policies (which can include authorization policies) which apply to certain entities can also be represented in the Directory. As proof, see the work products of the Policy WG and the work products of DMTF CIM. These Policies should not be part of the ACL Model. -- #::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::| # Larry Bartz | | # lbartz@parnelli.indy.cr.irs.gov | Ooo, ooo, | # | Ooo, ooo, oooooo! | # | I've got a gnu attitude! | # voice (317) 226-7060 | | # FAX (317) 226-6378 | | #::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::| From list@netscape.com Thu Feb 15 15:13:22 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id PAA29055 for ; Thu, 15 Feb 2001 15:13:21 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1FKBJH04481; Thu, 15 Feb 2001 12:11:20 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1FKBK613561; Thu, 15 Feb 2001 12:11:20 -0800 (PST) Resent-Date: Thu, 15 Feb 2001 12:11:20 -0800 (PST) Message-Id: <5.0.2.1.0.20010215115956.00a8c968@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Thu, 15 Feb 2001 12:10:12 -0800 To: "Larry S. Bartz" From: Bruce Greenblatt Subject: Re: ACL Model and application defined permission Cc: Rob Byrne , ietf-ldapext@netscape.com, estokes@tivoli.com, blakley@tivoli.com, djbrink@us.ibm.com, IETF Policy WG LIST In-Reply-To: <3A8C29CF.8D4F6767@parnelli.indy.cr.irs.gov> References: <5.0.2.1.0.20010214170548.00a6f4b0@pop.walltech.com> <3A8BE557.6535A170@france.sun.com> <5.0.2.1.0.20010215092438.00a86650@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"PhFf8.A.hTD.nfDj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 02:11 PM 2/15/2001 -0500, Larry S. Bartz wrote: OK. We agree on something. That's always good. >I disagree with your suggestion that the scope of the ACL Model should >be extended. > >The ACL is the place to manage access to the Directory representation, >the motes of data which comprise the Directory itself. The ACL Model is >scoped to manage access of Directory operations, Directory CRUD. The ACL >Model should stay in scope. > >This very issue was discussed by several participants in ldapext in the >spring and summer of 1998, and maybe again later. The discussion was >initiated by those who objected to the "use" term (and its intended >functionality) of the original and early ACL Model drafts. The outcome, >the result of those discussions, was the focused and purposeful scope of >the current ACL Model. As I recall, the original draft of the model generated much unconstructive disagreement, and the chairs called for a vote on whether the work should even continue. As a result of the vote, the original model was pitched. The "use" construct defined there was not the same as what I am proposing. From the archives: "Use - Execute; useful in controlling access to the objects referred to by directory entries than in controlling access to the directory entries themselves." (from draft-ietf-ldapext-acl-model-00.txt) Clearly this is not the same as application defined permissions. I have been following this issue from the beginning, and I don't ever remember a discussion specifically related to application defined permissions taking place on the list. Of course there used to be a participant on the mailing list whose postings I stopped reading (list historians can probably guess who this is), so it is possible that I missed it. Bruce Bruce Greenblatt >Users, organizations, file servers, books, hats, and whatever else can >be represented in the Directory, but they are not a part of the ACL >Model. > >By the same token, Policies (which can include authorization policies) >which apply to certain entities can also be represented in the >Directory. >As proof, see the work products of the Policy WG and the work products >of >DMTF CIM. These Policies should not be part of the ACL Model. > >-- >#::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::| ># Larry Bartz | | ># lbartz@parnelli.indy.cr.irs.gov | Ooo, ooo, | ># | Ooo, ooo, oooooo! | ># | I've got a gnu attitude! | ># voice (317) 226-7060 | | ># FAX (317) 226-6378 | | >#::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::| From list@netscape.com Thu Feb 15 17:08:20 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA01400 for ; Thu, 15 Feb 2001 17:08:19 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1FM6aH23471; Thu, 15 Feb 2001 14:06:36 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1FM6bk05469; Thu, 15 Feb 2001 14:06:37 -0800 (PST) Resent-Date: Thu, 15 Feb 2001 14:06:37 -0800 (PST) Message-Id: X-Mailer: Novell GroupWise 5.5.5 Date: Thu, 15 Feb 2001 15:06:10 -0700 From: "Javed Khan" To: Subject: Java LDAP API: Unsolicited notifications Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=_461DFDCA.81E0C2F6" Resent-Message-ID: <"xaawbC.A.FVB.rLFj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=_461DFDCA.81E0C2F6 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: quoted-printable RFC 2251 (page 24) says that unsolicited notifications are essentially = LDAP Extended Response type LDAPMessage(es). It might be cleaner to = change the prototype for the "messageReceived" method in the new = "LDAPUnsolicitedNotificationListener" class to: public void messageReceived(LDAPExtendedResponse msg);=20 instead of public void messageReceived(LDAPMessage msg); This way the listener sub-class can easily get access to the OID and any = other data in the unsolicited notification by using the access methods = already defined in the LDAPExtendedResponse class. After all the OID and = data field are the only interesting piece of information in the unsolicited= notification. Javed --=_461DFDCA.81E0C2F6 Content-Type: text/plain Content-Disposition: attachment; filename="TEXT.htm"
RFC 2251 (page 24)  says that unsolicited notifications are essentially LDAP Extended Response type LDAPMessage(es).  It might be cleaner to change the prototype for the "messageReceived" method in the new  "LDAPUnsolicitedNotificationListener" class to:
 
public void messageReceived(LDAPExtendedResponse msg);
 
instead of
 
public void messageReceived(LDAPMessage msg);
 
This way the listener sub-class can easily get access to the OID and any other data in the unsolicited notification by using the access methods already defined in the LDAPExtendedResponse class.  After all the OID and data field are the only interesting piece of information in the unsolicited notification.
 
Javed
 --=_461DFDCA.81E0C2F6-- From list@netscape.com Thu Feb 15 20:55:40 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA04038 for ; Thu, 15 Feb 2001 20:55:39 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1G1riH22357; Thu, 15 Feb 2001 17:53:45 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1G1rkY25060; Thu, 15 Feb 2001 17:53:46 -0800 (PST) Resent-Date: Thu, 15 Feb 2001 17:53:46 -0800 (PST) X-Mailer: Mozilla 4.14 [en] (WinNT; A) References: 0F225E822 Subject: Please contact me ASAP about possibly featuring you on our TV show X-Accept-Language: en Content-Type: text/html Message-ID: To: From: Date: Thu, 15 Feb 2001 20:41:53 MIME-Version: 1.0 X-Other-References: 0A79018B3 Resent-Message-ID: <"TWbxOB.A.MHG.ngIj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: quoted-printable X-MIME-Autoconverted: from 8bit to quoted-printable by netscape.com id f1G1riH22357 Content-Transfer-Encoding: quoted-printable
We are an independent affiliate to one of the
top business television studios in the country,
TVA Productions. They are currently looking for
successful and innovative companies to feature
on their new, yet already nationally-acclaimed
TV newsmagazine series.

"BUSINESS WORLD NEWS"
Spotlight on Success

They have a 12-time Emmy winning news team---and
reach over 70 million households and businesses.
(See news article below).

Since BWN is a sponsored (paid) news program, you
are guaranteed exactly:

WHEN: weekdays, primetime between 5:30 pm-10:00 pm
and on select weekend mornings.

WHERE: nationally or regionally in cities you
select on major broadcast affiliates and cable
channels; airlines, cruise lines, business
portals on the internet, video streamed from your website
and BWN=B9s heavily-trafficked site, etc.

and

HOW OFTEN: up to 72 times per package
..your 5 to 30-minute Spotlight will air.

ADDITIONALLY: A video news release (VNR) version
of your Spotlight will also be offered to more than
450 other TV newsrooms worldwide via Media Alert
allowing reporters and producers to quickly evaluate
the story content of your VNR to incorporate into
news broadcasts. Each newsroom is offered your
complete transcript, VNR Spotlight with separate
audio tracks, and B-roll on Beta or 3/4". Over
10,000 reporters covering more than 900 news beats
in 69+ countries currently subscribe to Media Alert.

No news organization has the resources in labor,
time or funds to cover every worthy story. With
CNN and other major news media laying off hundreds
of staffers, most positive, in-depth televised
non-breaking news stories now rely on footage
provided by P.R. agencies and video news release
(VNR) producers. (Source: Medialink Study, February 2001)

BWN will send their news crew and reporter to your
locations worldwide to shoot interviews and B-roll
for 4-6 hours or longer if mutually agreeable. Third
party commentaries and story wraparounds by BWN's
Emmy-winning news anchors will be taped from their
$multi-million dollar studio in Hollywood, CA
(next to Universal Studios since 1987).

TVA has become one of the top business television,
video, DVD and CD production / media distribution
companies in the country---due largely to the
overwhelming success of this new series. In addition
to Spotlight production, you'll also receive an
expanded corporate video version; a large supply of
videotapes and CD-Roms to send to potential investors
or prospects; loop tapes for exhibiting at tradeshows
or in your lobby; video streaming setup from your
website and major business portals; your broadcast
schedule and story with links and company logo will
be strategically placed on BWN's heavily trafficked
site; an optional TV-by-Mail program (for NARROW-casting
to your target market) and distribution to major cruise
lines and airlines for in-flight programming. BWN's
website lists the many Fortune 500s, global conglomerates,
startups, non-profits, and "mom pops" that have already
taken advantage of this B2B and B2C publicity / PR /
marketing / advertising / branding / direct-marketing /
DRTV / Investor relations / recruitment and training
package---for a FRACTION of the usual costs.

IMPORTANT NOTE: EVERY client to date (except for one)
has been happy with the results---including media-savvy
Fortune 500s and global conglomerates, as well as
startups, non-profits, and "mom and pops." Their
contact names and numbers, letters received, awards
won, broadcast schedules and streaming video of
recently televised Spotlights are all on the
website.

The reason why TVA can carry 50-90% of the total
production, media and promotion costs and benefits
provided you is by syndicating the repackaged
content to other television newsrooms, overseas
cable programming and business portals on the
internet.

----------------------------------------------------------

Excerpts (full article on website) from a two-page
COVER STORY in the Los Angeles Business Journal
(January 10, 2000 / pages 1 and 3)

"BUSINESS WORLD NEWS" has attracted some of the most
powerful figures in American business and politics -
people like Intel Corp. founder Andrew Grove and {U.S.
Senators and Congressmen}. It has helped influence the passage of nationa= l
legislation, and may well have caused the stock of
{numerous companies} to hit a 52-week high. It is hosted
by Emmy-winning broadcasters {and field reporters
nationwide} and appears on...selected CBS affiliate
stations and {major cable and satellite networks, airlines,
cruise lines, etc...}.

Lending further credibility to the show are the heavy
hitters who have appeared, such as Grove and {prominent
senators and congressmen},as well as former David E. Kelley
Productions President Jeffrey Kramer and high-level
executives from BOEING, MOTOROLA and IBM. Each potential
client is screened through
TVA
's editorial committee,
which is made up of "award-winning writers, producers,
directors, editors, and P.R. execs..."
(full article on website)

----------------------------------------------------------

FOR MORE INFORMATION, email your name, telephone number,
email address and website url to: [Click Here]
or Fax to 818-505-8370
----------------------------------------------------------

If this invitation was received in error, please drop us a
note at [Click H= ere] to ensure updates will not be sent
to you in the future.


DISCLAIMER: This email is being sent to you by an independent
affiliate to TVA Productions and "Business World News." We
receive a commission for referrals accepted by TVA to appear
on their Show and who've agreed to share a small portion of
the production, media and promotion costs associated with
their Spotlight. You may forward this email to other
newsworthy candidates. If accepted, we will split the
agency fee with you---or if you prefer, pay for
additional airings, videos and / or CD-Roms of your
Spotlight.

----------------------------------------------------------

The information in this document is proprietary and confidential
and is protected under United States and International Copyright
and Trademark laws. No part of this document may be reproduced or
transmitted, in any form by any means whatsoever - except for the
forwarding purpose stated above. Any other use of this document
in any form, without the express prior written consent of the
author is prohibited by law.


Copyright (c) 2000, All rights reserved.

































x0215C

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% It must be emphasized, once again, that most of the methodological work in modern linguistics effects a significant implementation of the levels of acceptability from fairly high (eg (99a)) to virtual gibberish (eg (98d)). For one thing, my proposed independent structuralistic concept necessitates that urgent consideration be applied to the management-by-contention principle. We have already seen that initiation of basic charismatic subculture development adds overwhelming Folkloristic significance to Krapp's Last Tape. %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% From list@netscape.com Thu Feb 15 22:42:17 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id WAA07913 for ; Thu, 15 Feb 2001 22:42:17 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1G3eaH03797; Thu, 15 Feb 2001 19:40:36 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1G3eZM03110; Thu, 15 Feb 2001 19:40:35 -0800 (PST) Resent-Date: Thu, 15 Feb 2001 19:40:35 -0800 (PST) Message-Id: <200102160334.DAA19070@escargot.esatclear.ie> From: "A Professional Marketer - FOR YOU" To: Sender: "A Professional Marketer - FOR YOU" Mime-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1" Date: Fri, 16 Feb 2001 03:36:08 -0000 X-Priority: 1 (Highest) Content-Transfer-Encoding: 8bit Resent-Message-ID: <"3lxK4.A.vv.vEKj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit *************************************************************************** ******************************* ADVERTISING PACKAGE FOR SALE - For payment/remove instructions please see below. *************************************************************************** ******************************* EMS = An Express mail server to send your emails out ASAP. This is the full version licensed to me.(30 day demo availible for free but it's $49.99 to register the fullversion giving all options and resale rights - if purchased from me that is. Buying the full version for $49.99 elsewhere wont give you resale rights and will only give you the software for your own personal use) Key Generator for EMS - Gives you resale rights to EMS full version and also the license needed to register the software after 30 days. An Info Pack - With 1000's of income reports and advice (old but very useful) Info-Report Softare - Insider secrets to creating profitable classified ads - Full version. (sold for between $19.99-$39.99 online seperately) Excellent E-Book - proves the ones you pay for are always the best. CheckMAN - Check Printing Software. All you need for printing checks out quickly and easily. THE PUBLISHING COMPANY IN A BOX = This is incredible and you would purchase this alone for more then the price I am asking for my whole package. Read about it here - this is a great piece of equipment to have - http://64.21.33.136/desc/kits/publishing_kit.htm - It sells for $99 dolars but do not purchase it at that site because I will give it to you including everything else for less then the price of this alone. BONUSES (Note: I am not selling you these but I will include them in the package if you purchase now) Bonus - Text Bomber 2000 = It is feature rich and will best assist you in extracting email addresses from files off your hard drive - EXTREMELY FAST. Bonus - Listmanager = Ability to clean lists, that is, remove any duplicate or unwanted addresses. List Manager is the simplest email address list management tool available. Ability to create remove list and remove emails from remove list from all files loaded. Bonus - Traffic Attractor - Market PRO 2 software. Attract enormous traffic to your website using this tool. Bonus - Agent Web Ranking software - Great resourse for advertising and ranking your website. Bonus - 4 Ebooks worth $195 - Free Advertising , Killer Ads, MLM Tactics, Superior Tools. Includes information on how to explode your sales 1200% and how to advertise for as little as $10 per million contacts. There are also reports on how to advertise in America in offline newspapers at a low rate of $180 per million newspapers. Must have information, great reports and great resources. This alone and publishing company in a box is worthy triple the price I ask for EVERYTHING above. *************************************************************************** *************************************************************************** DETAILS FOR PAYMENT. Thank you for you interest in purchasing my ADVERTISING PACKAGE. My name is David Hardiman and rest assured you are getting a FANTASTIC DEAL. Everything included in this package is worth alot more then what I am asking for it. The Publising company in a box is sold for $99 dollars elsewhere except I include it with so much more for just $45 dollars to you now. To recieve this software and everything else listed above, first write a personal letter to me containing some personal information and your primary email address , next send $45 dollars cash or cheque wrapped in 2 sheets of printing paper alongside the letter and put it all in an envelope and post it to David Hardiman using the fastest mode of postage possible to this address: 18 Claremont Pk. Circular Rd. Galway , Ireland I will notify you imediately once I recieve your letter and cash or check. Soon afterward I will give you the details nessesary to obtaining the package above and then my friend you will have enough advertising resources to keep you happy for a long time :) giving you hits where ever you want :). *************************************************************************** *************************************************************************** If you are going to purchase this package from me please reply with an EMAIL ASAP with the subject line reading 'BOUGHT' and a quick message to let me know if your sending cash or a check ect ... so I can keep track :) Thank you. Sincerely, David Hardiman. ******************************************************* This message is in full compliance with U.S. Federal requirements for commercial email under bill S.1618 Title lll, Section 301, Paragraph (a)(2)(C) passed by the 105th U.S. Congress and cannot be considered SPAM since it includes a remove mechanism. To be removed simply reply to this message with 'REMOVE' In the subject line and include your email address in the body of the email. ******************************************************* From list@netscape.com Fri Feb 16 06:37:46 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id GAA26324 for ; Fri, 16 Feb 2001 06:37:45 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1GBZab09804; Fri, 16 Feb 2001 03:35:36 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1GBZdE29952; Fri, 16 Feb 2001 03:35:39 -0800 (PST) Resent-Date: Fri, 16 Feb 2001 03:35:39 -0800 (PST) Sender: Robert.Byrne@france.Sun.COM Message-ID: <3A8D1061.FF14D1EE@france.sun.com> Date: Fri, 16 Feb 2001 12:34:57 +0100 From: Rob Byrne Organization: Sun Microsystems X-Mailer: Mozilla 4.7 [en] (X11; I; SunOS 5.8 sun4u) X-Accept-Language: en MIME-Version: 1.0 To: "Larry S. Bartz" CC: Bruce Greenblatt , ietf-ldapext@netscape.com, estokes@tivoli.com, blakley@tivoli.com, djbrink@us.ibm.com, IETF Policy WG LIST Subject: Re: ACL Model and application defined permission References: <5.0.2.1.0.20010214170548.00a6f4b0@pop.walltech.com> <3A8BE557.6535A170@france.sun.com> <5.0.2.1.0.20010215092438.00a86650@pop.walltech.com> <3A8C29CF.8D4F6767@parnelli.indy.cr.irs.gov> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"atUq-D.A.oTH.JCRj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Larry, I think you are absolutely right that the access control model must stay focused and that there will be "other policy" that will be quite rightly expressed external to the access control model. I just want to clarify that the kind of extensiblity I was talking about trying to define is motivated by the need to support evolving directory "stuff" and so I think is in scope. The point is that it seems a shame not to be able to incorporate new controls or extended operations, as much as we can, within one access control model. A good example would be the Proxy Authorisation Control. Classically an access control statement makes an assertion about the rights of some subject on an object--so there are two important "bits". Along comes the Proxy Control and now there ia an extra bit, namely the other subject that the original subject can proxy as. So unless the original model provides a way to extend itslef to accomodate the new subject, it has to be redone. If we can design a model to allow this kind of extensibility then I think that is desirable--there will always be new controls/extended operations coming along. In relation to Bruce's issue, I guesss what you would dislike would be if Bruce used this mechanism to say define a new extended permission "sitOn" and then represented a chair as cn=brucesChair,o=chezBruce and then started granting and denying access using this permission and object in the obvious way. I kind of see both sides here--"sitOn" clearly has nothing to do with a directory operation and so is therefore out of place as a permission....on the other hand if an application wanted to leverage the directory's support for notions of user, objects and permissions...then why not...? We haven't explicitly included that in the model...it's just allowed by it. Rob. "Larry S. Bartz" wrote: > > Bruce Greenblatt wrote: > > > > At 12:00 PM 2/15/2001 -0500, Larry S. Bartz wrote: > > > > >The ACL Model should be limited to support of > > >Directory operations. This is not to say that the Directory shouldn't > > >be involved in supporting access, authorization, and usage decisions for > > >entities which are external to the Directory. > > > > > > > Larry, > > > > I couldn't disagree more. What you fail to mention, is that ALL entities > > are external to the directory. The information that is stored in the > > directory is a partial representation of an external entity. For example, > > there are many more attributes of a user than are stored in the > > directory. Why are users, organizations, file servers, etc. internal to a > > directory, and a book or a hat external to the directory? There is no > > obvious reason, because the directory is just keeping track certain > > properties of these entities. The more information that is kept in the > > directory,the more valuable it is. > > > > Bruce > > > > Bruce, > > I agree with your assertion regarding the difference between an object > and the representation of an object in the Directory. My bad. I > shouldn't > have used a double negative in the sentence which you quoted above. > Restated, > "The Directory should be involved in supporting access, authorization, > and > usage decisions for entities which are external to the Directory." We > agree to that, I think. > > I also agree that the value of the Directory is proportional to the > information it contains. Further, I agree that the Directory is a > natural > platform for associating principals and services, consumers and > suppliers, > for convenience and/or in support of security goals. > > I disagree with your suggestion that the scope of the ACL Model should > be extended. > > The ACL is the place to manage access to the Directory representation, > the motes of data which comprise the Directory itself. The ACL Model is > scoped to manage access of Directory operations, Directory CRUD. The ACL > Model should stay in scope. > > This very issue was discussed by several participants in ldapext in the > spring and summer of 1998, and maybe again later. The discussion was > initiated by those who objected to the "use" term (and its intended > functionality) of the original and early ACL Model drafts. The outcome, > the result of those discussions, was the focused and purposeful scope of > the current ACL Model. > > Users, organizations, file servers, books, hats, and whatever else can > be represented in the Directory, but they are not a part of the ACL > Model. > > By the same token, Policies (which can include authorization policies) > which apply to certain entities can also be represented in the > Directory. > As proof, see the work products of the Policy WG and the work products > of > DMTF CIM. These Policies should not be part of the ACL Model. > > -- > #::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::| > # Larry Bartz | | > # lbartz@parnelli.indy.cr.irs.gov | Ooo, ooo, | > # | Ooo, ooo, oooooo! | > # | I've got a gnu attitude! | > # voice (317) 226-7060 | | > # FAX (317) 226-6378 | | > #::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::| From list@netscape.com Fri Feb 16 08:38:37 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id IAA28507 for ; Fri, 16 Feb 2001 08:38:35 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1GDaIH20334; Fri, 16 Feb 2001 05:36:18 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1GDaI224740; Fri, 16 Feb 2001 05:36:18 -0800 (PST) Resent-Date: Fri, 16 Feb 2001 05:36:18 -0800 (PST) Date: Fri, 16 Feb 01 05:17:04 EST From: E79993@ratesources.com To: info2000@forthelife.net Subject: Secure real-time transactions for your business or on your website ! Message-ID: Reply-To: E79993@ratesources.com Comments: Authenticated sender is Resent-Message-ID: <"UOTvVB.A.8BG.RzSj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Increase Sales Up to 1500% You can be accepting credit cards within 10 days! Good Credit / Bad Credit /Adult Sites/ No Problem!! 99% Approval! Application Fee of $195.00 & Electronic Check Set-Up Fee of $295.00 WAIVED!! We specialize in Retail, Home-Based, MLM’S, Network Marketing, High Volume, Membership Sites, and New Businesses that would most likely be declined by other processors! CALL NOW(Toll-Free) 1-800-644-2659 Why Accept Credit Cards? 1. Many Internet Businesses will increase sales up to 1500%! 2. Quicker access to your money! 3. No more of, "The checks in the mail". 4. Customers willing to spend more $$$! 5. More credibility for your business. 6. Capitalize on the impulse buyers! Features Include · EZ credit approval · Secure real-time transactions on your website. · Set-up and app fees waived! · Terminal and printer or software available for processing! · Equipment purchase or 100% tax deductible EZ pay lease option available! · Discount Rates as low as 1.58%! · We pay you $150.00 for every person you refer us for processing! ************ACT NOW AND PAY NO SET-UP OR APP FEE************** To have a representative contact you call 1-800-644-2659 This offer only for U.S. residents, or Canadians with a valid SS# and U.S. bank acct. ******************************************************** to be removed : by sending a reply to: ImaNoWantIt@hotmail.com with the word remove in the subject line. ********************************************************* 8 From list@netscape.com Fri Feb 16 09:27:51 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id JAA29814 for ; Fri, 16 Feb 2001 09:27:51 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1GEQGb23191; Fri, 16 Feb 2001 06:26:16 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1GEQH606216; Fri, 16 Feb 2001 06:26:17 -0800 (PST) Resent-Date: Fri, 16 Feb 2001 06:26:17 -0800 (PST) Sender: lsbart35@mears.indy.cr.irs.gov Message-ID: <3A8D3851.677EAD37@parnelli.indy.cr.irs.gov> Date: Fri, 16 Feb 2001 09:25:21 -0500 From: "Larry S. Bartz" X-Mailer: Mozilla 4.72 [en] (X11; U; Linux 2.2.14-5.0smp i686) X-Accept-Language: en MIME-Version: 1.0 To: Rob Byrne CC: Bruce Greenblatt , ietf-ldapext@netscape.com, estokes@tivoli.com, blakley@tivoli.com, djbrink@us.ibm.com, IETF Policy WG LIST Subject: Re: ACL Model and application defined permission References: <5.0.2.1.0.20010214170548.00a6f4b0@pop.walltech.com> <3A8BE557.6535A170@france.sun.com> <5.0.2.1.0.20010215092438.00a86650@pop.walltech.com> <3A8C29CF.8D4F6767@parnelli.indy.cr.irs.gov> <3A8D1061.FF14D1EE@france.sun.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"hkybAD.A.ngB.HiTj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Thanks, Rob. You have succinctly summarized my position and explained the extensibility strategy to my satisfaction. Rob Byrne wrote: > > Larry, > > I think you are absolutely right that the access control model must stay > focused and that there will be "other policy" that will be quite rightly > expressed external to the access control model. I just want to clarify > that the kind of extensiblity I was talking about trying to define is > motivated by the need to support evolving directory "stuff" and so I > think is in scope. > The point is that it seems a shame not to be able to incorporate new > controls or extended operations, as much as we can, within one access > control model. A good example would be the Proxy Authorisation > Control. Classically an access control statement makes an assertion > about the rights of some subject on an object--so there are two > important "bits". Along comes the Proxy Control and now there ia an > extra bit, namely the other subject that the original subject can proxy > as. So unless the original model provides a way to extend itslef to > accomodate the new subject, it has to be redone. If we can design a > model to allow this kind of extensibility then I think that is > desirable--there will always be new controls/extended operations coming > along. > In relation to Bruce's issue, I guesss what you would dislike would be > if Bruce used this mechanism to say define a new extended permission > "sitOn" and then represented a chair as cn=brucesChair,o=chezBruce and > then started granting and denying access using this permission and > object in the obvious way. I kind of see both sides here--"sitOn" > clearly has nothing to do with a directory operation and so is therefore > out of place as a permission....on the other hand if an application > wanted to leverage the directory's support for notions of user, objects > and permissions...then why not...? We haven't explicitly included that > in the model...it's just allowed by it. > > Rob. > > "Larry S. Bartz" wrote: > > > > Bruce Greenblatt wrote: > > > > > > At 12:00 PM 2/15/2001 -0500, Larry S. Bartz wrote: > > > > > > >The ACL Model should be limited to support of > > > >Directory operations. This is not to say that the Directory shouldn't > > > >be involved in supporting access, authorization, and usage decisions for > > > >entities which are external to the Directory. > > > > > > > > > > Larry, > > > > > > I couldn't disagree more. What you fail to mention, is that ALL entities > > > are external to the directory. The information that is stored in the > > > directory is a partial representation of an external entity. For example, > > > there are many more attributes of a user than are stored in the > > > directory. Why are users, organizations, file servers, etc. internal to a > > > directory, and a book or a hat external to the directory? There is no > > > obvious reason, because the directory is just keeping track certain > > > properties of these entities. The more information that is kept in the > > > directory,the more valuable it is. > > > > > > Bruce > > > > > > > Bruce, > > > > I agree with your assertion regarding the difference between an object > > and the representation of an object in the Directory. My bad. I > > shouldn't > > have used a double negative in the sentence which you quoted above. > > Restated, > > "The Directory should be involved in supporting access, authorization, > > and > > usage decisions for entities which are external to the Directory." We > > agree to that, I think. > > > > I also agree that the value of the Directory is proportional to the > > information it contains. Further, I agree that the Directory is a > > natural > > platform for associating principals and services, consumers and > > suppliers, > > for convenience and/or in support of security goals. > > > > I disagree with your suggestion that the scope of the ACL Model should > > be extended. > > > > The ACL is the place to manage access to the Directory representation, > > the motes of data which comprise the Directory itself. The ACL Model is > > scoped to manage access of Directory operations, Directory CRUD. The ACL > > Model should stay in scope. > > > > This very issue was discussed by several participants in ldapext in the > > spring and summer of 1998, and maybe again later. The discussion was > > initiated by those who objected to the "use" term (and its intended > > functionality) of the original and early ACL Model drafts. The outcome, > > the result of those discussions, was the focused and purposeful scope of > > the current ACL Model. > > > > Users, organizations, file servers, books, hats, and whatever else can > > be represented in the Directory, but they are not a part of the ACL > > Model. > > > > By the same token, Policies (which can include authorization policies) > > which apply to certain entities can also be represented in the > > Directory. > > As proof, see the work products of the Policy WG and the work products > > of > > DMTF CIM. These Policies should not be part of the ACL Model. > > -- #::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::| # Larry Bartz | | # lbartz@parnelli.indy.cr.irs.gov | Ooo, ooo, | # | Ooo, ooo, oooooo! | # | I've got a gnu attitude! | # voice (317) 226-7060 | | # FAX (317) 226-6378 | | #::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::| From list@netscape.com Fri Feb 16 15:19:37 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id PAA08734 for ; Fri, 16 Feb 2001 15:19:36 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1GKHFb23888; Fri, 16 Feb 2001 12:17:15 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1GKHFQ27613; Fri, 16 Feb 2001 12:17:15 -0800 (PST) Resent-Date: Fri, 16 Feb 2001 12:17:15 -0800 (PST) From: "Ryan Moats" To: Subject: Document status questions... Date: Fri, 16 Feb 2001 14:20:06 -0600 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700 Resent-Message-ID: <"jE2CVD.A.FvG.JrYj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit While working on a draft that references draft-ietf-ldapext-locate-04, I noticed that it seems to be expired in time if not in actuality. Since draft-ietf-ldapext-ldap-taxonomy-04 is still languishing having cleared WG last call (I've refreshed it once to keep it alive in the repository and I forsee another refresh in April) for this draft to finish and I don't recall having seen much discussion on the mailing list, I'm wondering of the status of this document is? Ryan Moats From list@netscape.com Fri Feb 16 19:31:57 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id TAA12249 for ; Fri, 16 Feb 2001 19:31:56 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1H0TiK22398; Fri, 16 Feb 2001 16:29:44 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1H0Tjk20008; Fri, 16 Feb 2001 16:29:45 -0800 (PST) Resent-Date: Fri, 16 Feb 2001 16:29:45 -0800 (PST) Message-ID: <298402001261702637700@msn.com> X-EM-Version: 5, 0, 0, 14 X-EM-Registration: #01B0530810E603002D00 From: "Jae" Subject: MAKE $50,000 IN 90 DAYS!! Date: Fri, 16 Feb 2001 16:26:37 -0800 MIME-Version: 1.0 Content-type: text/plain; charset="US-ASCII" X-OriginalArrivalTime: 17 Feb 2001 00:29:05.0235 (UTC) FILETIME=[A245BA30:01C09878] Resent-Message-ID: <"2oycKB.A.Q4E.3Xcj6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com DO NOT DELETE, PRINT IT, AND READ IT . IT HAS WORKED SO WELL, THIS IS MY THIRD TIME AROUND. I QUIT MY BORING JOB AND WORK AT THIS ABOUT ONE TO TWO HOURS A DAY PROCESSING ORDERS, INCLUDING MY DRIVE TO THE BANK! SO GO FOR IT, YOU WILL BE GLAD YOU DID! EARN $100,000 PER YEAR SENDING E-MAIL !!! Dear Friend, You can earn $50,000 or more in the next 90 days sending e-mail, Seem impossible? Read on for details; is there a catch; NO, there is no catch, just send your emails and be on your way to financial freedom. "AS SEEN ON NATIONAL TELEVISION" Thank you for your time and Interest. This is the letter you've been reading about in the news lately. Due to the popularity of this letter on the Internet, a major nightly news program recently devoted an entire show to the investigation of the program described below to see, if it really can make people money. The show also investigated whether or not the program was legal. Their findings proved once and for all that there are, absolutely no laws prohibiting the participation in the program. This has helped to show people that this is a simple, harmless and fun way to make some extra money at home. The results of this show have been truly remarkable. So many people are participating that those involved are doing much better than ever before. Since everyone makes more as more people try it out, its been very exciting to be a part of lately. You will understand once you experience it. "HERE IT IS BELOW" ================================================ ================================================ *** Print This Now For Future Reference *** The following income opportunity is one you may be interested in taking a look at. It can be started with VERY LITTLE investment and the income return is TREMENDOUS!!! $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ If you would like to make at least $50,000 in less than 90 days! Please read the enclosed program...THEN READ IT AGAIN !!! $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ THIS IS A LEGITIMATE, LEGAL, MONEY MAKING OPPORTUNITY. It does not require you to come into contact with people, do any hard work, and best of all, you never have to leave the house except to get the mail. If you believe that someday you'll get that big break that you've been waiting for, THIS IS IT! Simply follow the instructions, and your dreams will come true. This Multi-level e-mail order marketing program works perfectly 100% EVERY TIME. E-mail is the sales tool of the future. Take advantage of this non-commercialized method of advertising NOW! The longer you wait, the more people will be doing business using e-mail. Get your piece of this action !!! MULTI-LEVEL MARKETING (MLM) has finally gained respectability. It is being taught in the Harvard Business School, and both Stanford Research and the Wall Street Journal have stated that between 50% and 65% of all goods and services will be sold through multi-level methods by the mid to late 1990's. This is a Multi-Billion Dollar industry and of the 500,000 millionaires in the U.S., 20% (100,000) made their fortune in the last several years in MLM. Moreover, statistics show 45 people become millionaires everyday through Multi-Level Marketing. You may have heard this story before, but over the summer Donald Trump made an appearance on the David Letterman show. Dave asked him what he would do if he lost everything and had to start over from scratch. Without hesitating, Trump said he would find a good network marketing company and get to work. The audience started to hoot and boo him. He looked out at the audience and dead-panned his response "That's why I'm sitting up here and you are all sitting out there!" With network marketing you have two sources of income. Direct commissions from sales you make yourself and commissions from sales made by people you introduce to the business. Residual income is the secret of the wealthy. It means investing time or money once and getting paid again and again and again. In network marketing, it also means getting paid for the work of others. The enclosed information is something I almost let slip through my fingers. Fortunately, sometime later I re-read everything and gave some thought and study to it. My name is Johnathon Rourke. Two years ago, the corporation I worked at for the past twelve years down-sized and my position was eliminated. After unproductive job interviews, I decided to open my own business. Over the past year, I incurred many unforeseen financial problems. I owed my family, friends and creditors over $35,000. The economy was taking a toll on my business and I just couldn't seem to make ends meet. I had to refinance and borrow against my home to support my family and struggling business. AT THAT MOMENT something significant happened in my life and I am writing to share the experience in hopes that this will change your life FOREVER FINANCIALLY!!! In mid December, I received this program via e-mail. Six month's prior to receiving this program I had been sending away for information on various business opportunities. All of the programs I received, in my opinion, were not cost effective. They were either too difficult for me to comprehend or the initial investment was too much for me to risk to see if they would work or not. One claimed that I would make a million dollars in one year...it didn't tell me I'd have to write a book to make it! But like I was saying, in December of 1997 I received this program. I didn't send for it, or ask for it, they just got my name off a mailing list. THANK GOODNESS FOR THAT!!! After reading it several times, to make sure I was reading it correctly, I couldn't believe my eyes. Here was a MONEY MAKING PHENOMENON. I could invest as much as I wanted to start, without putting me further into debt. After I got a pencil and paper and figured it out, I would at least get my money back. But like most of you I was still a little skeptical and a little worried about the legal aspects of it all. So I checked it out with the U.S. Post Office (1-800-725-2161 24-hrs) and they confirmed that it is indeed legal! After determining the program was LEGAL and NOT A CHAIN LETTER, I decided "WHY NOT." Initially I sent out 10,000 e-mails. It cost me about $15 for my time on-line. The great thing about e-mail is that I don't need any money for printing to send out the program, and because all of my orders are fulfilled via e-mail, the only expense is my time. I am telling you like it is, I hope it doesn't turn you off, but I promised myself that I would not "rip-off" anyone, no matter how much money it cost me. In less than one week, I was starting to receive orders for REPORT #1. By January 13, I had received 26 orders for REPORT #1. Your goal is to "RECEIVE at least 20 ORDERS FOR REPORT #1 WITHIN 2 WEEKS. IF YOU DON'T, SEND OUT MORE PROGRAMS UNTIL YOU DO!" My first step in making $50,000 in 90 days was done. By January 30, I had received 196 orders for REPORT #2. Your goal is to "RECEIVE AT LEAST 100+ ORDERS FOR REPORT #2 WITHIN 2 WEEKS. IF NOT, SEND OUT MORE PROGRAMS UNTIL YOU DO. ONCE YOU HAVE 100 ORDERS, THE REST IS EASY, RELAX, YOU WILL MAKE YOUR $50,000 GOAL." Well, I had 196 orders for REPORT #2, 96 more than I needed. So I sat back and relaxed. By March 1, of my e-mailing of 10,000, I received $58,000 with more coming in every day. I paid off ALL my debts and bought a much needed new car. Please take time to read the attached program, IT WILL CHANGE YOUR LIFE FOREVER!!! Remember, it won't work if you don't try it. This program does work, but you must follow it EXACTLY! Especially the rules of not trying to place your name in a different place. It won't work, you'll lose out on a lot of money! In order for this program to work, you must meet your goal of 20+ orders for REPORT #1, and 100+ orders for REPORT #2 and you will make $50,000 or more in 90 days. I AM LIVING PROOF THAT IT WORKS!!! If you choose not to participate in this program, I am sorry. It really is a great opportunity with little cost or risk to you. If you choose to participate, follow the program and you will be on your way to financial security. If you are a fellow business owner and are in financial trouble like I was, or you want to start your own business, consider this a sign. I DID! Sincerely, Johnathon Rourke P.S. Do you have any idea what 11,700 $5 bills ($58,000) look like piled up on a kitchen table? IT'S AWESOME! A PERSONAL NOTE FROM THE ORIGINATOR OF THIS PROGRAM: By the time you have read the enclosed program and reports, you should have concluded that such a program, and one that is legal, could not have been created by an amateur. Let me tell you a little about myself. I had a profitable business for 10 years. Then in 1979 my business began falling off. I was doing the same things that were previously successful for me, but it wasn't working. Finally, I figured it out. It wasn't me, it was the economy. Inflation and recession had replaced the stable economy that had been with us since 1945. I don't have to tell you what happened to the unemployment rate... because many of you know from first hand experience. There were more failures and bankruptcies than ever before. The middle class was vanishing. Those who knew what they were doing invested wisely and moved up. Those who did not, including those who never had anything to save or invest, were moving down into the ranks of the poor. As the saying goes, "THE RICH GET RICHER AND THE POOR GET POORER." The traditional methods of making money will never allow you to "move up" or "get rich", inflation will see to that. You have just received information that can give you financial freedom for the rest of your life, with "NO RISK" and "JUST A LITTLE BIT OF EFFORT." You can make more money in the next few months than you have ever imagined. I should also point out that I will not see a penny of this money, nor anyone else who has provided a testimonial for this program. I have already made over 4 MILLION DOLLARS! I have retired from the program after sending out over 16,000 programs. Now I have several offices that make this and several other programs here and over seas. Follow the program EXACTLY AS INSTRUCTED. Do not change it in any way. It works exceedingly well as it is now. Remember to e-mail a copy of this exciting report to everyone you can think of. One of the people you send this to may send out 50,000...and your name will be on everyone of them! Remember though, the more you send out the more potential customers you will reach. So my friend, I have given you the ideas, information, materials and opportunity to become financially independent, IT IS UP TO YOU NOW! ************************************************************ "THINK ABOUT IT" Before you delete this program from your mailbox, as I almost did, take a little time to read it and REALLY THINK ABOUT IT. Get a pencil and figure out what could happen when YOU participate. Figure out the worst possible response and no matter how you calculate it, you will still make a lot of money! You will definitely get back what you invested. Any doubts you have will vanish when your first orders come in. IT WORKS! Jody Jacobs, Richmond, VA ************************************************************ HERE'S HOW THIS AMAZING PROGRAM WILL MAKE YOU THOUSANDS OF DOLLAR$ INSTRUCTIONS: This method of raising capital REALLY WORKS 100% EVERY TIME. I am sure that you could use up to $50,000 or more in the next 90 days. Before you say "BULL... ", please read this program carefully. This is not a chain letter, but a perfectly legal money making opportunity. Basically, this is what you do: As with all multi-level businesses, we build our business by recruiting new partners and selling our products. Every state in the USA allows you to recruit new multi-level business partners, and we offer a product for EVERY dollar sent. YOUR ORDERS COME BY MAIL AND ARE FILLED BY E-MAIL, so you are not involved in personal selling. You do it privately in your own home, store or office. This is the GREATEST Multi-Level Mail Order Marketing anywhere: This is what you MUST do: 1. Order all 4 reports shown on the list below (you can't sell them if you don't order them). * For each report, send $5.00 CASH, the NAME & NUMBER OF THE REPORT YOU ARE ORDERING, YOUR E-MAIL AND ADDRESS, YOUR NAME & RETURN ADDRESS (in case of a problem) and to the person whose name appears on the list next to the report. MAKE SURE YOUR RETURN ADDRESS IS ON YOUR ENVELOPE IN CASE OF ANY MAIL PROBLEMS! * When you place your order, make sure you order each of the four reports. You will need all four reports so that you can save them on your computer and resell them. * Within a few days you will receive, via e-mail, each of the four reports. Save them on your computer so they will be accessible for you to send to the 1,000's of people who will order them from you. 2. IMPORTANT-- DO NOT alter the names of the people who are listed next to each report, or their sequence on the list,in any way other than is instructed below in steps "a" through "f" or you will lose out on the majority of your profits. Once you understand the way this works, you'll also see how it doesn't work if you change it. Remember, this method has been tested, and if you alter it, it will not work. a. Look below for the listing of available reports. b. After you've ordered the four reports, take this Advertisement and remove the name and address under REPORT #4. This person has made it through the cycle and is no doubt counting their $50,000! c. Move the name and address under REPORT #3 down to REPORT #4. d. Move the name and address under REPORT #2 down to REPORT #3. e. Move the name and address under REPORT #1 down to REPORT #2. f. Insert your name/address in the REPORT #1 position. Please make sure you copy every name and address ACCURATELY! 3. Take this entire letter, including the modified list of names, and save it to your computer. Make NO changes to the Instruction portion of this letter. Your cost to participate in this is practically nothing (surely you can afford $20). You obviously already have an Internet Connection and e-mail is FREE! To assist you with marketing your business on the internet, the 4 reports you purchase will provide you with invaluable marketing information which includes how to send bulk e-mails, where to find thousands of free classified ads and much, much more. In addition you will be provided with information on Internet Marketing Clubs such as INTERNET MARKETING RESOURCES (IMR): This Is one the premiere Internet marketing clubs on the INTERNET. This club provides a forum where internet marketers from all over the world can exchange ideas and secrets on Internet Marketing. In addition, this club specializes in providing free internet marketing tools and services for the Do-Yourself-Internet-Marketer. They will provide you with free bulk e-mail software and up to 1,000,000 fresh e-mail addresses each week. This club will provide you with hundreds of free resources, which include: How to obtain free web sites, how to obtain top rankings in search engines for your web-site, how to send bulk e-mail into AOL and Compuserve, how to market your products on newsgroups, free classified ads, electronic malls, bulletin boards, banner ads and much more. There are two primary methods of building your downline: METHOD #1: SENDING BULK E-MAIL Let's say that you decide to start small, just to see how it goes, and we'll assume you and all those involved send out only 2,000 programs each. Let's also assume that the mailing receives a 0.5% response. Using a good list the response could be much better. Also, many people will send out hundreds of thousands of programs instead of 2,000. But continuing with this example, you send out only 2,000 programs. With a 0.5% response, that is only 10 orders for REPORT #1. Those 10 people respond by sending out 2,000 programs each for a total of 20,000. Out of those 0.5%, 100 people respond and order REPORT #2. Those 100 mail out 2,000 programs each for a total of 200,000. The 0.5% response to that is 1,000 orders for REPORT #3. Those 1,000 send out 2,000 programs each for a 2,000,000 total. The 0.5% response to that is 10,000 orders for REPORT #4. That's 10,000 $5 bills for you. CASH!!! Your total income in this example is $50 + $500 + $5,000+ $50,000 for a total of $55,550!!! REMEMBER FRIEND, THIS IS ASSUMING 1,990 OUT OF THE 2,000 PEOPLE YOU MAIL TO WILL DO ABSOLUTELY NOTHING AND TRASH THIS PROGRAM! DARE TO THINK FOR A MOMENT WHAT WOULD HAPPEN IF EVERYONE, OR HALF SENT OUT 100,000 PROGRAMS INSTEAD OF 2,000. Believe me, many people will do just that, and more! By the way, your cost to participate in this is practically nothing. You obviously already have an internet connection and e-mail is FREE !!! REPORT #2 will show you the best methods for bulk e-mailing, tell you where to obtain free bulk e-mail software and where to obtain e-mail lists. METHOD #2 - PLACING FREE ADS ON THE INTERNET 1. Advertising on the 'Net is very, very inexpensive, and there are HUNDREDS of FREE places to advertise. Let's say you decide to start small just to see how well it works. Assume your goal is to get ONLY 10 people to participate on your first level. (Placing a lot of FREE ads on the internet will EASILY get a larger response.) Also assume that everyone else in YOUR ORGANIZATION gets ONLY 10 downline members. Follow this example to achieve the STAGGERING results below. 1st level-your 10 members with $5 .........$50 2nd level-10 mems from those 10 ($5 x 100).......$500 3rd level-10 mems from those 100 ($5 x 1,000) $5,000 4th level-10 mems from those 1,000 ($5 x 10k) $50,000 THIS TOTALS ---------------------------$55,550 Remember friends, this assumes that the people who participate only recruit 10 people each. Think for a moment what would happen if they got 20 people to participate! Most people get 100's of participants! THINK ABOUT IT! For every $5.00 you receive, all you must do is e-mail them the report they ordered. THAT'S IT! ALWAYS PROVIDE SAME-DAY SERVICE ON ALL ORDERS! This will guarantee that the e-mail THEY send out, with YOUR name and address on it, will be prompt because they can't advertise until they receive the report! ------------------------------------------ AVAILABLE REPORTS ------------------------------------------ *** Order Each REPORT by NUMBER and NAME *** Notes: - ALWAYS SEND $5 CASH (U.S. CURRENCY) FOR EACH REPORT CHEQUES NOT ACCEPTED - ALWAYS SEND YOUR ORDER VIA FIRST CLASS MAIL - Make sure the cash is concealed by wrapping it in at least two sheets of paper - On one of those sheets of paper, include: (a) the number & name of the report you are ordering, (b) your e-mail address, and (c) your name & postal address. PLACE YOUR ORDER FOR THESE REPORTS NOW: ______________________________________________________ REPORT #1 "The Insider's Guide to Advertising for Free on the Internet" ORDER REPORT #1 FROM: J.M.M. 4420 Sarah Street Apt.#11 Burbank,CA 91505 ______________________________________________________ REPORT #2 "The Insider's Guide to Sending Bulk E-mail on the Internet" ORDER REPORT #2 FROM: JCS Marketing 13709 Gullivers Trail Bowie,MD 20720 ______________________________________________________ REPORT #3 "The Secrets to Multilevel Marketing on the Internet" ORDER REPORT #3 FROM: MCFS 11918 SE Division Portland,Oregon 97266 ______________________________________________________ REPORT #4 "How to become a Millionaire utilizing the Power of Multilevel Marketing and the Internet" ORDER REPORT #4 FROM: M Spurlock 3301 S Andrews Ave #35B Ft. Luaderdale,FL 33316 ______________________________________________________ ______________________________________________________ About 50,000 new people get online every month! ******* TIPS FOR SUCCESS ******* * TREAT THIS AS YOUR BUSINESS! Be prompt, professional, and follow the directions accurately. * Send for the four reports IMMEDIATELY so you will have them when the orders start coming in because: When you receive a $5 order, you MUST send out the requested product/report. * ALWAYS PROVIDE SAME-DAY SERVICE ON THE ORDERS YOU RECEIVE. * Be patient and persistent with this program. If you follow the instructions exactly, your results WILL BE SUCCESSFUL! * ABOVE ALL, HAVE FAITH IN YOURSELF AND KNOW YOU WILL SUCCEED! ******* YOUR SUCCESS GUIDELINES ******* Follow these guidelines to guarantee your success: If you don't receive 20 orders for REPORT #1 within two weeks, continue advertising or sending e-mails until you do. Then, a couple of weeks later you should receive at least 100 orders for REPORT#2. If you don't, continue advertising or sending e-mails until you do. Once you have received 100 or more orders for REPORT #2, YOU CAN RELAX, because the system is already working for you, and the cash will continue to roll in! THIS IS IMPORTANT TO REMEMBER: Every time your name is moved down on the list, you are placed in front of a DIFFERENT report. You can KEEP TRACK of your PROGRESS by watching which report people are ordering from you. If you want to generate more income, send another batch of e-mails or continue placing ads and start the whole process again! There is no limit to the income you will generate from this business! Before you make your decision as to whether or not you participate in this program. Please answer one question. DO YOU WANT TO CHANGE YOUR LIFE? If the answer is yes, please look at the following facts about this program: 1. YOU ARE SELLING A PRODUCT WHICH DOES NOT COST ANYTHING TO PRODUCE! 2. YOU ARE SELLING A PRODUCT WHICH DOES NOT COST ANYTHING TO SHIP! 3. YOU ARE SELLING A PRODUCT WHICH DOES NOT COST YOU ANYTHING TO ADVERTISE! 4. YOU ARE UTILIZING THE POWER OF THE INTERNET AND THE POWER OF MULTI-LEVEL MARKETING TO DISTRIBUTE YOUR PRODUCT ALL OVER THE WORLD! 5. YOUR ONLY EXPENSES OTHER THAN YOUR INITIAL $20 INVESTMENT IS YOUR TIME! 6. VIRTUALLY ALL OF THE INCOME YOU GENERATE FROM THIS PROGRAM IS PURE PROFIT! 7. THIS PROGRAM WILL CHANGE YOUR LIFE FOREVER. ******* T E S T I M O N I A L S ******* This program does work, but you must follow it EXACTLY! Especially the rule of not trying to place your name in a different position, it won't work and you'll lose a lot of potential income. I'm living proof that it works. It really is a great opportunity to make relatively easy money, with little cost to you. If you do choose to participate, follow the program exactly, and you'll be on your way to financial security. Steven Bardfield, Portland, OR ************************************************************ My name is Mitchell. My wife, Jody, and I live in Chicago, IL. I am a cost accountant with a major U.S. Corporation and I make pretty good money. When I received the program I grumbled to Jody about receiving "junk mail." I made fun of the whole thing, spouting my knowledge of the population and percentages involved. I "knew" it wouldn't work. Jody totally ignored my supposed intelligence and jumped in with both feet. I made merciless fun of her, and was ready to lay the old "I told you so" on her when the thing didn't work... well, the laugh was on me! Within two weeks she had received over 50 responses. Within 45 days she had received over $147,200 in $5 bills! I was shocked! I was sure that I had it all figured and that it wouldn't work. I AM a believer now. I have joined Jody in her "hobby." I did have seven more years until retirement, but I think of the "rat race" and it's not for me. We owe it all to MLM. Mitchell Wolf MD., Chicago, IL ************************************************************ The main reason for this letter is to convince you that this system is honest, lawful, extremely profitable, and is a way to get a large amount of money in a short time. I was approached several times before I checked this out. I joined just to see what one could expect in return for the minimal effort and money required. To my astonishment, I received $36,470.00 in the first 14 weeks, with money still coming in. Charles Morris, Esq. ************************************************************ Not being the gambling type, it took me several weeks to make up my mind to participate in this plan. But conservative that I am, I decided that the initial investment was so little that there was just no way that I wouldn't get enough orders to at least get my money back. Boy, was I surprised when I found my medium-size post office box crammed with orders! For awhile, it got so overloaded that I had to start picking up my mail at the window. I'll make more money this year than any 10 years of my life before. The nice thing about this deal is that it doesn't matter where people live. There simply isn't a better investment with a faster return. Paige Willis, Des Moines, IA ************************************************************ I had received this program before. I deleted it, but later I wondered if I shouldn't have given it a try. Of course, I had no idea who to contact to get another copy, so I had to wait until I was e-mailed another program, ....11 months passed then it came...I didn't delete this one!...I made more than $41,000 on the first try!! Violet Wilson, Johnstown, PA *********************************************************** This is my third time to participate in this plan. We have quit our jobs, and will soon buy a home on the beach and live off the interest on our money. The only way on earth that this plan will work for you is if you do it. For your sake, and for your family's sake don't pass up this golden opportunity. Good luck and happy spending! Kerry Ford, Centerport, NY ************************************************************ ORDER YOUR REPORTS TODAY AND GET STARTED ON YOUR ROAD TO FINANCIAL FREEDOM! NOW IS THE TIME FOR YOUR TURN DECISIVE ACTION YIELDS POWERFUL RESULTS PLEASE NOTE: If you need help with starting a business, registering a business name, learning how income tax is handled, etc., contact your local office of the Small Business Administration (a Federal agency) 1-(800)827-5722 for free help and answers to questions. Also, the Internal Revenue Service offers free help via telephone and free seminars about business tax requirements. Your earnings and results are highly dependent on your activities and advertising. This letter constitutes no guarantees stated nor implied. In the event that it is determined that this letter constitutes a guarantee of any kind, that guarantee is now void. Any testimonials or amounts of earnings listed in this letter may be factual or fictitious. If you have any question of the legality of this letter contact the Office of Associate Director for Marketing Practices Federal Trade Commission Bureau of Consumer Protection in Washington DC. TO BE REMOVED FROM FUTURE MAILINGS PLEASE SEND AN EMAIL TO JETERGRL211@MSN.COM AND PUT "REMOVE" IN THE SUBJECT LINE From list@netscape.com Mon Feb 19 13:08:36 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA10620 for ; Mon, 19 Feb 2001 13:08:35 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1JI5CK10780; Mon, 19 Feb 2001 10:05:12 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1JI5CY28945; Mon, 19 Feb 2001 10:05:12 -0800 (PST) Resent-Date: Mon, 19 Feb 2001 10:05:12 -0800 (PST) From: To: Date: Mon, 19 Feb 2001 09:21:55 Message-Id: <172.309931.519601@correo.007mundo.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Resent-Message-ID: <"YqI4oC.A.XDH.VBWk6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit < get your own 100 meg web site for only $11.95 per month today! STOP PAYING $19.95 or more PER MONTH for your web site, WHEN YOU CAN GET ONE FOR ONLY $11.95 PER MONTH! DO YOU ALREADY HAVE A WEBSITE? ALL YOU HAVE TO DO IS TRANSFER THE DOMAIN TO OUR SERVERS AND UPLOAD YOUR DATA AND YOU ARE READY TO GO! YOUR NEW WEB SPACE CAN BE CREATED INSTANTLY WITH JUST A SIMPLE PHONE CALL OUR OFFICE. YOU CAN CHANGE YOUR SITE AS MUCH AS YOU WANT with no extra charge! UNLIMITED TRAFFIC -- no extra charge! A SET UP FEE OF $40.00 APPLIES for FIRST TIME CUSTOMERS. ALL FEES PREPAID IN ADVANCE FOR THE YEAR PLUS A $40.00 SET UP CHARGE. FOR DETAILS CALL 1 888 248 0765 or fax 240 337 8325 WEB HOSTING INTERNATIONAL From list@netscape.com Tue Feb 20 00:59:33 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id AAA24494 for ; Tue, 20 Feb 2001 00:59:33 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1K5vOb25645; Mon, 19 Feb 2001 21:57:24 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1K5vQw10587; Mon, 19 Feb 2001 21:57:26 -0800 (PST) Resent-Date: Mon, 19 Feb 2001 21:57:26 -0800 (PST) Subject: e-z safe diet From: star02@163.net Date: Tue, 20 Feb 2001 14:03:42 +0000 To: $user@domain.com Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8BIT Message-Id: <23y35q3.hvagco13qerp5q723r7m@dialup08.188.net> Resent-Message-ID: <"cKslnD.A.2kC.Edgk6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8BIT Dear Friend, This last fall, our family had a reunion at which time we had a Professional Photographer take pictures, and I wanted to use those pictures of our immediate Family on Christmas cards that we were going to send to Friends and family this Christmas. In November, we got the proofs back so that we could pick our favorite Picture. Everybody looked wonderful and the background was spectacular but I could not Find myself in the picture. I looked and looked and finally got out a magnifying glass.To my horror, I found this woman with a face and body that looked like it was 100 Pounds overweight. I fell off the chair I was sitting on and began to cry. Click link below for free easy diet samples: http://www.naturalsupplementsonline.com/fatburners/affiliates/89754321/index.html?89754321 My body resembled an oversized blimp that would takeoff should a heavy wind arise... it was HIDEOUS! I had mirrors in my house but most of them were designed to only reflect from the waist up and I honestly hadn't noticed that my cheekbones had totally disappeared and that my face looked like a shapeless clump of flesh. Well, I was in a terrible situation and I was at a loss as to what to do. My willpower, well, Basically Sucks and I had so- so -so- much weight to lose that I wasn't sure I'd live long enough to get it all off. Plus, I hate diets and can only stick to them for a very short period of time before I fall off the food Wagon and I always hated to work out!!! My goal to slim down seemed totally hopeless. Click link below for free bottle: http://www.naturalsupplementsonline.com/fatburners/affiliates/89754321/index.html?89754321 AND THEN IT HAPPENED. I received fabulous information about a product called Beverly Hills fat burners. It seemed to contain everything I needed. ; It curbs your appetite, increases energy, burns fat at the fastest rate possible, no special diets are required, you don't have to exercise. It Doesn't make you feel nervous AND Its ALL-NATURAL WITH NO ADVERSE SIDE EFFECTS. It also was priced well below other products and I received a second bottle for being afirst time customer. I figured that if it didn't work I wouldn't be out much money. It also has 100% money back guaranteed. It's been about 5 weeks now but I swear I'm beginning to look like that famous movie star. My cheekbones are absolutely glorious. I have dropped 4sizes and I see the results each and every day. click link below for free weight lose: http://www.naturalsupplementsonline.com/fatburners/affiliates/89754321/index.html?89754321 I swear I look like a new person and a good one at that. I promise you that this product works. It does everything it promises and then some. Just losing the weight alone, makes you feel so much better and younger. It puts zest back into your life and assures you that you'll achieve your weight loss goals. In another few 6 weeks I will reach my goal...something I had given up on a long time ago. THANK YOU SO MUCH FOR YOUR PRODUCT. I FINALLY FOUND SOMETHING THAT REALLY WORKS. Sincerely, Jenny PLEASE CLICK ON THE LINK BELOW tTO BE REMOVED FORM OUR LIST: ##uid##-remove@lose-it-forever.com From list@netscape.com Tue Feb 20 06:36:29 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id GAA10210 for ; Tue, 20 Feb 2001 06:36:29 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1KBYH115574; Tue, 20 Feb 2001 03:34:17 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1KBYKw16302; Tue, 20 Feb 2001 03:34:20 -0800 (PST) Resent-Date: Tue, 20 Feb 2001 03:34:20 -0800 (PST) From: To: Date: Tue, 20 Feb 2001 02:51:08 Message-Id: <52.754127.247529@correo.007mundo.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Resent-Message-ID: <"NwvjED.A.H-D.6Ylk6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit < get your own 100 meg web site for only $11.95 per month today! STOP PAYING $19.95 or more PER MONTH for your web site, WHEN YOU CAN GET ONE FOR ONLY $11.95 PER MONTH! DO YOU ALREADY HAVE A WEBSITE? ALL YOU HAVE TO DO IS TRANSFER THE DOMAIN TO OUR SERVERS AND UPLOAD YOUR DATA AND YOU ARE READY TO GO! YOUR NEW WEB SPACE CAN BE CREATED INSTANTLY WITH JUST A SIMPLE PHONE CALL OUR OFFICE. YOU CAN CHANGE YOUR SITE AS MUCH AS YOU WANT with no extra charge! UNLIMITED TRAFFIC -- no extra charge! A SET UP FEE OF $40.00 APPLIES for FIRST TIME CUSTOMERS. ALL FEES PREPAID IN ADVANCE FOR THE YEAR PLUS A $40.00 SET UP CHARGE. FOR DETAILS CALL 1 888 248 0765 or fax 240 337 8325 WEB HOSTING INTERNATIONAL From list@netscape.com Tue Feb 20 13:36:44 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA20167 for ; Tue, 20 Feb 2001 13:36:44 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1KIYSx21909; Tue, 20 Feb 2001 10:34:28 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1KIYSE21049; Tue, 20 Feb 2001 10:34:28 -0800 (PST) Resent-Date: Tue, 20 Feb 2001 10:34:28 -0800 (PST) Message-Id: <5.0.2.1.0.20010220103216.00a679c8@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Tue, 20 Feb 2001 10:33:23 -0800 To: ietf-ldapext@netscape.com From: Bruce Greenblatt Subject: application defined permissions Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=====================_2429733==_" Resent-Message-ID: <"W9v93.A.dIF.xirk6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --=====================_2429733==_ Content-Type: text/plain; charset="us-ascii"; format=flowed As promised, attached are my proposed modifications to the ACL draft to support application defined permissions. Bruce --=====================_2429733==_ Content-Type: text/plain; charset="us-ascii" Content-Disposition: attachment; filename="application-defined-aci.txt" Here's the modified BNF for permissions to include application defined permissions. permission = "a" / ; add "d" / ; delete "e" / ; export "i" / ; import "n" / ; renameDN "b" / ; browseDN "t" / ; returnDN "r" / ; read "s" / ; search "w" / ; write (mod-add) "o" / ; obliterate (mod-del) "c" / ; compare "m" / ; make oidstring ; application defined permission oidstring = digit ("." digit)* digit = "0" | "1" | "2" | "3" | "4" | "5" | "6" | "7" | "8" | "9" Here's the modified ASN.1 for permissions to include application defined permissions. SimplePermission ::= ENUMERATED { add (0), delete (1), export (2), import (3), renameDN (4), browseDN (5), returnDN (6), read (7), search (8), write (9), obliterate (10), compare (11), make (12) } ApplicationDefinedPermission ::= OID Permission ::= CHOICE { simple SimplePermission, applicationdefined ApplicationDefinedPermission } Permissions ::= SEQUENCE OF PERMISSION Add a new section 4.2.2.1 Application Defined Permissions Application defined permissions are not intended to restrict the ability of any subject to perform LDAP operations against any LDAP entry. Application defined permissions are defined to allow LDAP applications to store their access control information within LDAP entries. For example, an electronic commerce application may make use of LDAP to store access control information about which customers have the ability to purchase various items that the electronic commerce application provides. This application can create an OID to represent the "purchase" permission. Then the application can create entries in the DIT representing the inventory items which are under access control. Finally, the application can assign rights to purchase these items, by creating ACI attributes to the inventory item entries, using other DIT entries as the subject of the ACI attribute. Once the DIT has been set up, the GetEffectiveRights operation and controls can be used to determine which users have rights to purchase various inventory items. Add a new example to section 8.3: Example #7 dn: o=XYZ, c=US ldapACI: subtree#grant:5.4.3.2.1#attr2 #group:cn=G1,ou=ABC,o=XYZ,c=US This is an example of an application defined permission. Assume that the OID 5.4.3.2.1 (which is not a legal OID), defines the "purchase" permission. This means that for the entire subtree rooted at "o = XYZ, c=us", all members of the named group have the permission to purchase all entries in the subtree. --=====================_2429733==_-- From list@netscape.com Tue Feb 20 14:00:11 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA20795 for ; Tue, 20 Feb 2001 14:00:10 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1KItbx26092; Tue, 20 Feb 2001 10:55:37 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1KItbs04555; Tue, 20 Feb 2001 10:55:37 -0800 (PST) Resent-Date: Tue, 20 Feb 2001 10:55:37 -0800 (PST) Message-Id: <5.0.2.1.0.20010220104816.00ac8290@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Tue, 20 Feb 2001 10:54:26 -0800 To: Bruce Greenblatt From: "Kurt D. Zeilenga" Subject: Re: application defined permissions Cc: ietf-ldapext@netscape.com In-Reply-To: <5.0.2.1.0.20010220103216.00a679c8@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"FXJZYC.A.tGB.o2rk6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com An attribute type can not, should not be both userApplication and operational usages. While I don't necessarily object to a syntax extension, I would object to overloading the ldapACI attribute type with userApplication usage. At 10:33 AM 2/20/01 -0800, Bruce Greenblatt wrote: >As promised, attached are my proposed modifications to the ACL draft to support application defined permissions. > >Bruce > From list@netscape.com Tue Feb 20 14:03:29 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA20980 for ; Tue, 20 Feb 2001 14:03:29 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1KJ0f112871; Tue, 20 Feb 2001 11:00:42 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1KJ0e207097; Tue, 20 Feb 2001 11:00:41 -0800 (PST) Resent-Date: Tue, 20 Feb 2001 11:00:41 -0800 (PST) Message-Id: <5.0.2.1.0.20010220110008.00a8b580@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Tue, 20 Feb 2001 11:00:27 -0800 To: ietf-ldapext@netscape.com From: Bruce Greenblatt Subject: Re: application defined permissions Cc: ietf-ldapext@netscape.com In-Reply-To: <5.0.2.1.0.20010220104816.00ac8290@router.boolean.net> References: <5.0.2.1.0.20010220103216.00a679c8@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"qPedUC.A.fuB.X7rk6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 10:54 AM 2/20/2001 -0800, Kurt D. Zeilenga wrote: >An attribute type can not, should not be both userApplication and >operational usages. Why not? >While I don't necessarily object to a >syntax extension, I would object to overloading the ldapACI >attribute type with userApplication usage. > >At 10:33 AM 2/20/01 -0800, Bruce Greenblatt wrote: > >As promised, attached are my proposed modifications to the ACL draft to > support application defined permissions. > > > >Bruce > > From list@netscape.com Tue Feb 20 14:22:20 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA21587 for ; Tue, 20 Feb 2001 14:22:20 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1KJJMx02141; Tue, 20 Feb 2001 11:19:23 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1KJJME16034; Tue, 20 Feb 2001 11:19:22 -0800 (PST) Resent-Date: Tue, 20 Feb 2001 11:19:22 -0800 (PST) Message-Id: <5.0.2.1.0.20010220111518.00adc610@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Tue, 20 Feb 2001 11:17:53 -0800 To: Bruce Greenblatt From: "Kurt D. Zeilenga" Subject: Re: application defined permissions Cc: ietf-ldapext@netscape.com, ietf-ldapext@netscape.com In-Reply-To: <5.0.2.1.0.20010220110008.00a8b580@pop.walltech.com> References: <5.0.2.1.0.20010220104816.00ac8290@router.boolean.net> <5.0.2.1.0.20010220103216.00a679c8@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"Xq9BRB.A._4D.2Msk6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 11:00 AM 2/20/01 -0800, Bruce Greenblatt wrote: >At 10:54 AM 2/20/2001 -0800, Kurt D. Zeilenga wrote: >>An attribute type can not, should not be both userApplication and >>operational usages. > >Why not? Because a directory implementation may not implement the operational usage but your application should still be able to store the user value. A server which does not support the operational usage should not publish the ldapACI attribute in its subschema. Kurt From list@netscape.com Tue Feb 20 15:01:58 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id PAA22923 for ; Tue, 20 Feb 2001 15:01:57 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1KJwxY12345; Tue, 20 Feb 2001 11:59:00 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1KJwwc08566; Tue, 20 Feb 2001 11:58:58 -0800 (PST) Resent-Date: Tue, 20 Feb 2001 11:58:58 -0800 (PST) Date: Tue, 20 Feb 2001 11:58:32 -0800 (PST) Message-Id: <200102201958.f1KJwL305202@ywing.netscape.com> From: robair@smallbizmail.com To: Entrepreneur:@netscape.com Subject: 300 MEMBERS BELOW YOU X-Reply-To: robair@smallbizmail.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"svCQF.A.KDC.7xsk6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit ------------------------------------------------------------------------------- Subject: 300 Members Below You -------------------------------------------------------------------------------- Have Your Downline Built BEFORE You Spend Any Money ! This program even offers you a Monthly Guaranteed Minimum Income !! Online Signup Here http://www.angelfire.com/biz6/highgoal/index.html YOU can easily get 800-1,000 Paid members under YOU in a month !! GUARANTEED DOWNLINE, GUARANTEED INCOME !!! Don't miss out on this Great Opportunity to secure yourself a Guaranteed Monthly Minimum Income !!! It's FREE to join our Post Launch Program !!! Your FREE membership # will also be entered into a lucky draw to WIN $100 to shop online !! ALL new members who join after you will be placed in ONE Straight Line down UNDER you. There is absolutely NO RISK to get involved and NO COST to join our Post Launch Program. To Sign up for Free Go to: http://www.angelfire.com/biz6/highgoal/index.html Online Signup Here Follow instructions at Signup Site. Provide first and last name and email address. You have nothing to lose and potentially a lot to gain. Join Today !!! We will confirm your position and send you a special report as soon as possible. -------------------------------------------------------------- If you have received this email by mistake please send reply and put REMOVE in subject block. I have you on a list of people interested in receiving business info. From list@netscape.com Tue Feb 20 19:51:49 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id TAA00573 for ; Tue, 20 Feb 2001 19:51:48 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1L0nTH13363; Tue, 20 Feb 2001 16:49:29 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1L0nTU06880; Tue, 20 Feb 2001 16:49:29 -0800 (PST) Resent-Date: Tue, 20 Feb 2001 16:49:29 -0800 (PST) Message-Id: <5.0.2.1.0.20010220163949.00aab0d8@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Tue, 20 Feb 2001 16:48:43 -0800 To: "Kurt D. Zeilenga" From: Bruce Greenblatt Subject: Re: application defined permissions Cc: ietf-ldapext@netscape.com In-Reply-To: <5.0.2.1.0.20010220111518.00adc610@router.boolean.net> References: <5.0.2.1.0.20010220110008.00a8b580@pop.walltech.com> <5.0.2.1.0.20010220104816.00ac8290@router.boolean.net> <5.0.2.1.0.20010220103216.00a679c8@pop.walltech.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"0QewyD.A.IrB.YCxk6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 11:17 AM 2/20/2001 -0800, Kurt D. Zeilenga wrote: >Because a directory implementation may not implement the operational >usage but your application should still be able to store the user >value. A server which does not support the operational usage should >not publish the ldapACI attribute in its subschema. I think that the application defined permissions are only useful in an LDAP server that already implements the rest of the ACL model. It is important that the effective rights computation for application defined permissions take place in the same manner as the LDAP defined permissions. If the LDAP server is not implementing the operational usage and effective rights computation, it is unlikely to be able to implement the computation for application defined permissions. I don't ever see an implementation supporting only application defined permissions. If all an application needs is a place to store permissions, it can easily use the member attribute, or something analogous. IMHO, the important thing is the ability of the LDAP server to compute effective rights. So, I'd like to see the application defined permissions bundled into the same attribute as the other permissions. However, if the consensus of the WG is to create two separate operational attributes, and have the exact same effective rights operations and controls applying to each attribute, we could probably do it that way. Bruce From list@netscape.com Tue Feb 20 19:57:21 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id TAA00647 for ; Tue, 20 Feb 2001 19:57:20 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1L0s3T21196; Tue, 20 Feb 2001 16:54:03 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1L0s4Q09173; Tue, 20 Feb 2001 16:54:04 -0800 (PST) Resent-Date: Tue, 20 Feb 2001 16:54:04 -0800 (PST) Message-ID: <004b01c09b9b$18885d40$06f12dc1@omj> From: "Per-Olav Gramstad" To: Subject: SV: application defined permissions Date: Wed, 21 Feb 2001 01:13:18 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.5 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id f1L0s1v09143 Resent-Message-ID: <"-cIZLD.A.9OC.pGxk6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com X-MIME-Autoconverted: from 8bit to quoted-printable by netscape.com id f1L0s3T21196 Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by ietf.org id TAA00647 Hello LDAPext! So I decided to join the list and that was easy. What could be done using the list? Not so easy. No, I haven't read through the entire archive but if not me who, if not now when. Here we go. The problem of defining permission seems to be a problem of demarcation and since the days of von Neuman demarcating state machines is done demarcating data and/or operations. Permissions is data that imply specific operations so demarcating permissions means demarcating operations. Is there anyone that of today could define all operations in future LDAP use? So we could discuss leaving the door open using "application defined definitions" but what about the possibility of interference between permissions application defined or not. It's my belief that extending permissions isn't about defining them by lists but to define a few basic permissions (read, write, create and delete) and expressing all future permissions in terms of these basic permissions. All future permissions must be decomposable into the basic permissions and interference between future permissions is resolved by interference rules among the basic permissions. There should be an example here but I'm too tired so sweet dreams Per-Olav Sleepyhead P.S. All symantic ;-) or semantic errors are intentional and created in communication of this message to you. D.S. -----Ursprungligt meddelande----- Från: Kurt D. Zeilenga Till: Bruce Greenblatt Kopia: ietf-ldapext@netscape.com ; ietf-ldapext@netscape.com Datum: den 20 februari 2001 20:21 Ämne: Re: application defined permissions >At 11:00 AM 2/20/01 -0800, Bruce Greenblatt wrote: >>At 10:54 AM 2/20/2001 -0800, Kurt D. Zeilenga wrote: >>>An attribute type can not, should not be both userApplication and >>>operational usages. >> >>Why not? > >Because a directory implementation may not implement the operational >usage but your application should still be able to store the user >value. A server which does not support the operational usage should >not publish the ldapACI attribute in its subschema. > >Kurt > From list@netscape.com Tue Feb 20 20:47:10 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA01541 for ; Tue, 20 Feb 2001 20:47:09 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1L1it003663; Tue, 20 Feb 2001 17:44:55 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1L1HeY21883; Tue, 20 Feb 2001 17:17:40 -0800 (PST) Resent-Date: Tue, 20 Feb 2001 17:17:40 -0800 (PST) Message-Id: <5.0.2.1.0.20010220170925.00ab4890@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Tue, 20 Feb 2001 17:15:44 -0800 To: "Per-Olav Gramstad" From: "Kurt D. Zeilenga" Subject: Re: SV: application defined permissions Cc: In-Reply-To: <004b01c09b9b$18885d40$06f12dc1@omj> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"WhuFKD.A.bVF.ycxk6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 01:13 AM 2/21/01 +0100, Per-Olav Gramstad wrote: >Hello LDAPext! > >So I decided to join the list and that was easy. What could be done using the list? Not so easy. > >No, I haven't read through the entire archive but if not me who, if not now when. > >Here we go. > >The problem of defining permission seems to be a problem of demarcation and since the days of von Neuman demarcating state machines is done demarcating data and/or operations. Permissions is data that imply specific operations so demarcating permissions means demarcating operations. Is there anyone that of today could define all operations in future LDAP use? So we could discuss leaving the door open using "application defined definitions" but what about the possibility of interference between permissions application defined or not. It's my belief that extending permissions isn't about defining them by lists but to define a few basic permissions (read, write, create and delete) and expressing all future permissions in terms of these basic permissions. All future permissions must be decomposable into the basic permissions and interference between future permissions is resolved by interference rules among the basic permissions. Please note the distinction between "application defined permissions" and "permissions to control access to extended operations". The former would be held by the server, but never be used by the server. The latter would provide some form of extensibility to control access in not-yet-defined operations. Now, in regards to your general suggestion to control extensions in terms of current permissions, I basically concur. However, there are extensions which don't fit well into the base permission set. Hence, I support adding some means of extending permissions to support extended operations but do not support using ldapACI for holding access information which does not controlling any LDAP operations. From list@netscape.com Wed Feb 21 09:32:21 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id JAA27751 for ; Wed, 21 Feb 2001 09:32:20 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1LEUe012210; Wed, 21 Feb 2001 06:30:40 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1LEUf214423; Wed, 21 Feb 2001 06:30:41 -0800 (PST) Resent-Date: Wed, 21 Feb 2001 06:30:41 -0800 (PST) Message-Id: <4.3.2.7.2.20010221151639.03ddcef0@nordic.cisco.com> X-Sender: hta@127.0.0.1 X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 21 Feb 2001 15:26:41 +0100 To: directory@apps.ietf.org From: Harald Alvestrand Subject: Non-WG Call on draft-alvestrand-directory-defs-01.txt Cc: dnsop@cafax.se, ietf-ldapext@netscape.com, ietf-ldup@imc.org, tf-lsd@terena.nl, rwhois@rwhois.net, ietf-else@openldap.org Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"FY4z-.A.9gD.PE9k6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com This message is intentionally copied quite widely, to a number of mailing lists where people who do "directory-like things" hang out. This is a Last Call before submitting to the IESG on the document draft-alvestrand-directory-defs-01.txt, available from the I-D directories, such as http://www.ietf.org/internet-drafts/draft-alvestrand-directory-defs-01.txt From the introduction: "When discussing systems for making information accessible through the Internet in standardized ways, it may be useful if the people discussing have a common understanding of the terms they use. One group of such systems is known under the term "directories". This document is not intended to be either comprehensive or definitive, but is intended to give some aid in mutual comprehension when discussing information access methods to be incorporated into Internet Standards-Track documents. Reference to this document would, for instance, give one the power to agree that the Domain Name Service is a global lookup repository with perimeter integrity and loose, converging consistency, while an LDAP directory server is a local, centralized repository with both lookup and search capability." In other words - a document to give a common understanding of terms like "The DNS is not a directory". There are 2 typos in the document that I know of already, so this is not the version that will be last-called. (See if you find them too .-) However, if you have other comments, PLEASE send them to myself and to directory@apps.ietf.org. DO NOT SEND TO THE LISTS IN THE CC: LINE! (my apologies for being unable to insert the oft-feared Reply-to: line) If no serious objections are made, I hope to submit version -03 to the IESG for consideration before the Minneapolis IETF meeting. Thank you. -- Harald Tveit Alvestrand, alvestrand@cisco.com +47 41 44 29 94 Personal email: Harald@Alvestrand.no From list@netscape.com Wed Feb 21 11:23:16 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id LAA01615 for ; Wed, 21 Feb 2001 11:23:16 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1LGKmM07715; Wed, 21 Feb 2001 08:20:49 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1LGKnw21239; Wed, 21 Feb 2001 08:20:49 -0800 (PST) Resent-Date: Wed, 21 Feb 2001 08:20:49 -0800 (PST) Date: Wed, 21 Feb 2001 08:19:22 -0800 (PST) Message-Id: <200102211619.f1LGJLQ09524@ywing.netscape.com> From: InquireToday@ispchannel.com To: @netscape.com Subject: Over35 Free Newsletter - Look Younger with Face Exercises X-Reply-To: InquireToday@ispchannel.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Resent-Message-ID: <"0WeF2.A.LLF.fr-k6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Over35 Free Newsletter 02-21-2001 Look Younger with Face Exercises! It is obvious that, for those of us over 35, a well-exercised, conditioned body looks much younger than one with soft, flabby, fewer muscles. If this is true for the body below the neck, what about above the neck? Underneath the skin and connective tissue, your face has many muscles. As we age, these muscles sag just like the muscles in the rest of our bodies. With proper facial exercises, your face will lift and be firmer, smoother. Also, well-toned muscles are better able to pump blood to the skin resulting in younger, healthier-looking looking skin. You can have the best skin care regime in the world, but if the muscles underneath are flabby, you will still look older. The results from exercising your face follow the same physiological laws of exercising your body – it doesn't happen overnight and you must maintain the exercises to maintain your results. And facial exercises are not just for the mature – younger folks can maintain their looks by starting while they are still young. Facial exercises don't take as much time as exercising your body. After initial toning, you can maintain your results typically in 10 minutes of exercise 3-4 times per week. Is it worth the time investment? After all – your face shows all the time! To find a facial exercise program that is right for you, go to any search engine and enter the key words “face exercise”. There are many programs to choose from. Feel free to forward. Please visit our One-and-Only SPONSOR: Donna suffered from ANEMIA and daily HEADACHES but finally found relief without drugs. To find out more, visit http://members.spree.com/travel/donnavg/main.htm REMOVAL: Simply reply to: TakeMeOff@ispchannel.com (thank you!) (Please – if this newsletter was sent to an address OTHER than the one you are replying from – such as with email forwarding – PLEASE provide the original address so I can find you for removal! Thank you so much!) To subscribe, email InquireToday@ispchannel.com with SUBSCRIBE in the subject line. From list@netscape.com Wed Feb 21 12:11:43 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA03198 for ; Wed, 21 Feb 2001 12:11:42 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1LH9g005800; Wed, 21 Feb 2001 09:09:43 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1LH9gg08447; Wed, 21 Feb 2001 09:09:42 -0800 (PST) Resent-Date: Wed, 21 Feb 2001 09:09:42 -0800 (PST) From: Rolf.Maeule@varetis.de Subject: Re: application defined permissions To: Bruce Greenblatt Cc: ietf-ldapext@netscape.com X-Mailer: Lotus Notes Release 5.0.4a July 24, 2000 Message-ID: Date: Wed, 21 Feb 2001 17:38:01 +0100 X-MIMETrack: Serialize by Router on Bavaria2/Muenchen/varetis(Release 5.0.4a |July 24, 2000) at 02/21/2001 06:08:45 PM MIME-Version: 1.0 Content-type: text/plain; charset=us-ascii Resent-Message-ID: <"kKJjFB.A.fCC.SZ_k6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com > Bruce Greenblatt wrote at 21.02.01 01:48: > > At 11:17 AM 2/20/2001 -0800, Kurt D. Zeilenga wrote: > > >Because a directory implementation may not implement the operational > >usage but your application should still be able to store the user > >value. A server which does not support the operational usage should > >not publish the ldapACI attribute in its subschema. > > I think that the application defined permissions are only useful in an LDAP > server that already implements the rest of the ACL model. It is important > that the effective rights computation for application defined permissions > take place in the same manner as the LDAP defined permissions. If the LDAP > server is not implementing the operational usage and effective rights > computation, it is unlikely to be able to implement the computation for > application defined permissions. I don't ever see an implementation > supporting only application defined permissions. If all an application > needs is a place to store permissions, it can easily use the member > attribute, or something analogous. IMHO, the important thing is the > ability of the LDAP server to compute effective rights. I agree. > So, I'd like to > see the application defined permissions bundled into the same attribute as > the other permissions. However, if the consensus of the WG is to create > two separate operational attributes, and have the exact same effective > rights operations and controls applying to each attribute, we could > probably do it that way. > > Bruce I see two kinds of extensions: a) additional rights needed for LDAP operations. A right like "return temporary DN which is valid for 5 minutes" might even influence standard LDAP operations. You need to modify the LDAP server to support it. b) additional rights needed by applications etc. Such rights will never influence server implementation. An LDAP server might want to reject extensions of type a) or at least say "Warning: I do not understand this extension", but accept extensions of type b). I therefore suggest using two attributes. Rolf From list@netscape.com Wed Feb 21 12:29:03 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA03696 for ; Wed, 21 Feb 2001 12:29:03 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1LHQa010318; Wed, 21 Feb 2001 09:26:36 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1LHQZI13299; Wed, 21 Feb 2001 09:26:35 -0800 (PST) Resent-Date: Wed, 21 Feb 2001 09:26:35 -0800 (PST) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.2.1 Date: Wed, 21 Feb 2001 10:16:58 -0700 From: "Ed Reed" To: , Subject: Inheriting / Cacheing / Replicating policy from superior administrative areas Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id f1LHQUv13203 Resent-Message-ID: <"PUnQJC.A.rOD.Hp_k6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit Preamble At the San Diego IETF in December a bar boff (1 round = $89 or so USD) was convened to consider how to deal with inheritance of policy down through a tree from superior to subordinate contexts. The topic came up because it's an issue for access control policy, which many of us would like to see be able to be inheritable from parents to children, so that an access granted to a parent or superior organizational unit, for instance, could be interpreted correctly as being implicitly granted to all the subordinate entries of that parent. Other policy information could benefit from such inheritance, and the general case is that policy set at the root of an enterprise (for instance) administrative area is applied to the whole of the administrative area, even if the administrative area is partitioned and distributed among several servers (or groups of servers) throughout the enterprise. Real world examples include Novell NDS trees, Microsoft ADS Forests, and probably things like ! the directory information tree in X.500 for a country, a governmental agency or any other sort of large organization. Since this discussion grew out of the LDAPSubentry internet draft discussion about inheritance, I've copied both the ldup and ldapext distribution lists. The requirement To support the kind of top-down policy inheritance described above, servers holding subordinate partitions of the administrative area (in other words, simple subtrees rooted below the root of the administrative area where the policy is set) need to be informed of the policy that they are supposed to inherit from above. Note that I've not said anything about how the policy is represented yet. It may be via attributes on the root of the administrative area, or it may be via subentries located immediately subordinate to the root of the administrative area, or by some other means. In fact, for the general case that includes the full X.500 subentry definition with subtree specifications in the subentry, it's only necessary that the policy subentry applies to the entry and its attributes being governed (I think - David? Helmut? Richard? Others?) So the question is how to make the subordinate partition of the namespace, that does not necessarily coreside on a server where the administrative area is rooted and where the inheritable governing policy is asserted, how does that subordinate namespace "know" about the inherited policy so that it can enforce it? Possible approaches There are several ways this has been approached in the past, and one can imagine many others. 1) the inheritable policy could be asserted when the superior/subordinate references are being administratively set to glue the two namespaces together, either manually by the administrators or programmatically via some hierarchical operational binding protocol, for instance. I think this is how X.500 implementation generally handle it. 2) a specialized form of replication that knows of the need to maintain cached information aggregated from superior administrative areas in the directory information tree takes responsibility to identify inheritable information and to maintain copies of it on or near subordinate partition roots. This makes the information available locally to the subordinate namespace in a "read-only" fashion that facilitates decision making and makes the specialized replication scheme responsible for propagating policy changes to all the subordinates when needed. This is how Novell's NDS does it. 3) servers holding subordinate partitions of an administrative area can "opportunistically cache" policy information locally. In this scenario, the access control policy engine (probably, as the direct consumer of the inherited policy information in one example) knows that policy information may be defined in superior areas of the directory information tree that it needs to know about, and so it "walks the tree" until it finds what is clearly the "top" of the authoritative administrative area within which it is supposed to operate. (I say it this way to highlight that the subordinate may well know its not supposed to walk the tree all the way to "dc=com", for instance, if the root of the organizations administrative area is "dc=oncalldba, dc=com", for instance) At any rate, the policy engine walks the tree "as far as its supposed to go" accumulating policy information that applies to it and cacheing it locally for future use. The walk would take place at server startup t! ime, or when the partition is placed "in service" (if it ever goes off line), or on scheduled "has anything changed I need to know about" walkabouts. Each policy engine would be responsible for its own cache of information and its own walkabouts (I like that term for this...) 4) whenever policy is defined at an administrative point that applies to subordinate entries, a process (either client or server-based, or some combination of both) performs the inverse to the walkabout described in #3 above - that is, it descends the tree depositing policy information (or changing policy information it finds there) on subordinate entries (either on partition roots or on each leaf entry itself) as it goes. This approach has the benefit of "pushing" changes from the point of administrative action to all the areas subject to the policy change, rather than relying on the "opportunistic cache" of #3. With some care, it need not be any more bandwidth consuming than the specialized replication scheme described in #2 above. And is more dynamic than the static configuration of #1 above. I think this is generally how Microsoft handles inheritable policy for access controls. (and yes, in professional contexts of previous lives I've dinged them for how they do it,! but that was nit picking over implementation approaches of what to decorate, not over the general concept of how to propagate changes). ["Ed"itorial note - this note alread covers more than we discussed at the bar boff] There are probably other approaches. In fact, we came up with one more at the bar boff. 5) each server holding a subordinate partition of an administrative area could also hold a "sparse replica" of the otherwise non-resident superior administrative areas which hold policy information relevant to the partition it does hold. This approach would allow LDUP to be responsible for propagating changes to policy "as written" to subordinate servers that need it, avoids creating specialized mechanisms that need to know how to aggregate policy information through multiple tiers of administrative area roots (something both #2 and #4 require, and something I for one really, really, really don't want to try to generalize for a standard), leaves interpretation of superior policy entirely up to the local policy decision functions (where it belongs) and "only" requires read-only replicas of the superior administrative root entry and its subentries. Being "read-only" replicas, the LDUP house keeping is kept to a minimum (because there will never be changes flowing from the su! bordinate copy to the administrative area root "master" replica). There will be replication traffic, which can be scheduled or event driven. The sparse replica replication agreements can be set via administrators to control how or what subentries are replicated (maybe only those flagged "inheritable"). As a read-only replica, it can be configured via transitive synch to take its changes from another read-only replica so you don't HAVE to have the situation where every server in the enterprise is banging away at the root-most master server for policy information, so we should be able to manage the network traffic scaling issues in large trees (though its true that using transitive synch lengthens the time it takes for changes to propagate to all servers). And, if you don't need it, don't use it. The cool thing is that this approach works for any number of inheritable policy information, including schema, password policy, etc. as well as for access control information. Anyway, that's the idea we came up with. Discussion is invited, if only to cause a change in subject on the mailing list ;-) Does this need to be an RFC? If the chairs think so, let me know whether to submit it as an internet draft under the ldup group name or as an individual submission. Thanks, Ed ================= Ed Reed Reed-Matthews, Inc. +1 801 796 7065 http://www.Reed-Matthews.COM From list@netscape.com Wed Feb 21 13:24:39 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA05099 for ; Wed, 21 Feb 2001 13:24:39 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1LIN8M29143; Wed, 21 Feb 2001 10:23:08 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1LIN8w16895; Wed, 21 Feb 2001 10:23:08 -0800 (PST) Resent-Date: Wed, 21 Feb 2001 10:23:08 -0800 (PST) Sender: Robert.Byrne@france.Sun.COM Message-ID: <3A94076A.DA6C06B3@france.sun.com> Date: Wed, 21 Feb 2001 19:22:34 +0100 From: Rob Byrne Organization: Sun Microsystems X-Mailer: Mozilla 4.7 [en] (X11; I; SunOS 5.8 sun4u) X-Accept-Language: en MIME-Version: 1.0 To: Rolf.Maeule@varetis.de CC: Bruce Greenblatt , ietf-ldapext@netscape.com Subject: Re: application defined permissions References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"RRxg6D.A.LGE.HeAl6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit Bruce, I agree with the responses...I think there needs to be a way to distinguish these "application/user" extended permissions from "operational" extended permissions, which we may wish to add to the model later. At first I thought we could get away with one extension mechanism for permissions, but the fact that the server can always ignore your extended application permissions means this is not possible. As this means building support for these application extended permissions explicitly into the model I'm not so warm to the idea. The reason, from the implementor point of view is, it's hard enough to get the core operational access control right without having to worry about stuff not strictly necessary to the core. So my suggestion would be as follows. Well this is an application issue. Even if the application is allowed define it's own permissions, it still has to define (extenally to the directory) which entries and attributes these permissions apply to. So, why not have the application use existing permissions (after all there is a whole slew of them) on special entries and attributes that the application defines and interpret these in a way meaningful to the application ? For example instead of requiring the extended application permission "sitOn" to the entry "cn=brucesChair,o=chezBruce", the application could require the "r" permission to this entry and interpret that as "sitOn". Granted, that involves the application in another mapping task but it can still leverage the getEffectiveRights control, which seems to be your main motivation. Rob. Rolf.Maeule@varetis.de wrote: > > > Bruce Greenblatt wrote at 21.02.01 01:48: > > > > At 11:17 AM 2/20/2001 -0800, Kurt D. Zeilenga wrote: > > > > >Because a directory implementation may not implement the operational > > >usage but your application should still be able to store the user > > >value. A server which does not support the operational usage should > > >not publish the ldapACI attribute in its subschema. > > > > I think that the application defined permissions are only useful in an > LDAP > > server that already implements the rest of the ACL model. It is > important > > that the effective rights computation for application defined permissions > > > take place in the same manner as the LDAP defined permissions. If the > LDAP > > server is not implementing the operational usage and effective rights > > computation, it is unlikely to be able to implement the computation for > > application defined permissions. I don't ever see an implementation > > supporting only application defined permissions. If all an application > > needs is a place to store permissions, it can easily use the member > > attribute, or something analogous. IMHO, the important thing is the > > ability of the LDAP server to compute effective rights. > > I agree. > > > So, I'd like to > > see the application defined permissions bundled into the same attribute > as > > the other permissions. However, if the consensus of the WG is to create > > two separate operational attributes, and have the exact same effective > > rights operations and controls applying to each attribute, we could > > probably do it that way. > > > > Bruce > > I see two kinds of extensions: > > a) additional rights needed for LDAP operations. A right like "return > temporary DN which is valid for 5 minutes" might even influence standard > LDAP operations. You need to modify the LDAP server to support it. > > b) additional rights needed by applications etc. Such rights will never > influence server implementation. > > An LDAP server might want to reject extensions of type a) or at least say > "Warning: I do not understand this extension", but accept extensions of > type b). I therefore suggest using two attributes. > > Rolf From list@netscape.com Wed Feb 21 14:58:52 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA07777 for ; Wed, 21 Feb 2001 14:58:52 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1LJujM18939; Wed, 21 Feb 2001 11:56:45 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1LJuk208246; Wed, 21 Feb 2001 11:56:46 -0800 (PST) Resent-Date: Wed, 21 Feb 2001 11:56:46 -0800 (PST) X-pair-Authenticated: 144.132.70.18 Reply-To: From: "Albert Langer" To: "'Ed Reed'" , , Subject: RE: Inheriting / Cacheing / Replicating policy from superioradministrative areas Date: Thu, 22 Feb 2001 06:59:40 +1100 Message-ID: <001301c09c40$d40c74c0$6628a8c0@nowhere.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Importance: Normal In-Reply-To: Resent-Message-ID: <"HvfRZB.A.eAC.91Bl6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit [Ed] Anyway, that's the idea we came up with. Discussion is invited, if only to cause a change in subject on the mailing list ;-) [Albert] Quick response for similar reason, as a break while still working on LDUP final call issues. I think it should be based directly on X.500 framework for administrative areas with whatever LDAP style simplifications can be achieved in those aspects that relate to operational bindings etc but no departures at all from a common conceptual framework as to how policy is inherited. Seems to me that the standards themselves and David Chadwick's online book about them point to a "natural" description that is very similar your option 5 "sparse replica". That is to treat admin points very much like "glue" entries necessary to maintain a connection from a subordinate context to the global tree. You simply replicate all superior admin points that a replicated area is nested within like any other glue. Then you use the glue style entries for those admin points at the replica to drive whatever implementation specific machinery is used to prioritize and enforce policy in strict accordance with the X.500 conceptual framework. If I understood correctly that seems to be what you saying about a "sparse replica", but integrates it with what's also needed in this context (and has been all along before dealing with multi-master) - a framework for directory distribution based on X.500 with detailed specification of operational bindings, glue entries etc. Administrative areas can't be defined independently of that framework without running into the fact that they are closely connected to it. Interesting issue relevant to current other discussions is that I suspect this replication could be an example where multi-master may be inapplicable due to the extreme hairiness of allowing for policy update conflicts. That in turn raises hairy issues about how one could combine single master partitions (even if only containing such "admin points" and other "glue"), with multi-master replicas subordinate to them on the same DSA implementation, with an overlap between the two at the innermost nested admin point. It also points to the necessity for actually implementing the LDUP WG charter to provide for single master as well as multi-master replication (the difference isn't just a "topology" but involves both conformance levels for DSAs and directory service replication requirements). Also points to need for replication management to be standardized with provisions for creating and merging replication areas etc. This may also closely relate to schema replication (for which X.500 defines similar admin points in the same conceptual framework). There are requirements about schema replication in the current requirements draft and machinery is needed to be able to coordinate schema changes with the replication of entries dependent on the schema changes - but there is no such machinery in the current architecture drafts. Similar machinery could be needed for coordination of policy changes. Any such coordination machinery has to be enforced by the conflict resolution mechanism and since none is currently specified, none is currently implemented by URP (whether or not it could do so, given that it does not retain log information that might be necessary). Then coordination machinery for any of these aspects is likely to involve something like the concepts of a "floating" or "failover" single master for that specific aspect as in the "schema master" and "infrastructure master" for AD. This is also needed to achieve eventual convegence as there is of course no way to guarantee that without some means of specifying which DSAs are currently authoritatively considered to be part of the replication network and which are excluded from it - otherwise meta-data would grow without bound while waiting for a failed DSA that isn't going to come back. Again there is no such machinery in the current architecture, consequently none in URP and no eventual convergence possible. Hmm, ... oh well, *some* of that was a "break" and it *is* all relevant to your original posting, which I have at least refrained from dissecting line by line ;-) From list@netscape.com Wed Feb 21 15:19:23 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id PAA08581 for ; Wed, 21 Feb 2001 15:19:23 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1LKHRM23170; Wed, 21 Feb 2001 12:17:27 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1LKHS621621; Wed, 21 Feb 2001 12:17:28 -0800 (PST) Resent-Date: Wed, 21 Feb 2001 12:17:28 -0800 (PST) Message-Id: <5.0.2.1.0.20010221120137.00a9bb10@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Wed, 21 Feb 2001 12:15:27 -0800 To: From: "Kurt D. Zeilenga" Subject: RE: Inheriting / Cacheing / Replicating policy from superioradministrative areas Cc: "'Ed Reed'" , , In-Reply-To: <001301c09c40$d40c74c0$6628a8c0@nowhere.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"P998x.A.YRF.WJCl6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 06:59 AM 2/22/01 +1100, Albert Langer wrote: >I think it should be based directly on X.500 framework for administrative >areas with whatever >LDAP style simplifications can be achieved in those aspects that relate to >operational bindings etc but no departures at all from a common conceptual >framework as to how policy is inherited. I concur. I would prefer to keep the directory's administrative model simple and as consistent as possible with the X.500 models. Such features as policy inheritance can be push into the administration application space. I note that one must be careful not to assume that naming relationships have any particular significance to the policy in force. Also, I note (like Albert) that the administrative model in X.500 does not to address the needs of multiple-master replication and hence may require significant adaptation. This may be difficult to engineer by itself, however it will be much harder to engineer if numerous unnecessary requirements are added to the mix. Kurt From list@netscape.com Wed Feb 21 16:01:44 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id QAA10135 for ; Wed, 21 Feb 2001 16:01:43 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1LKxc000480; Wed, 21 Feb 2001 12:59:38 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1LKxcA14631; Wed, 21 Feb 2001 12:59:38 -0800 (PST) Resent-Date: Wed, 21 Feb 2001 12:59:38 -0800 (PST) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.2.1 Date: Wed, 21 Feb 2001 13:49:11 -0700 From: "Ed Reed" To: , , Subject: RE: Inheriting / Cacheing / Replicating policy from superioradministrative areas Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id f1LKxZv14579 Resent-Message-ID: <"_QUe6C.A._jD.3wCl6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit Yeah - some policy information (in particular distributed knowledge about replica topology) is, in my opinion, better served via a single-master approach - and that's why "primary" is there as a replica type along with "updateable". The notion is borrowed from Novell's use of "master" to refer to the single replica in a ring that would act as the transaction coordinator for what are really two-phase commit-like state transitions in replica toplogy. But, alas, others insist that you can manage such things without having a single "master" responsible for topology configuration changes...splitting and joining partitions, creating and deleting replicas and replication agreements, etc. I look forward to seeing how they do it in a completely egalitarian setting where all updateable replicas are "equal". So clearly I'm not opposed to single master configurations...and have retained the one designation of one updateable replica of a partition as the "first among equals" to assist applications looking for a rendezvous point for serialization of their (application specific) operations. With regard to the option 5 similarity to X.500 - I agree that the sparse replicas might even be implemented as caches on external references (some directory implementations do external references - NDS does - though LDAP doesn't recognize the concept - yet). They're there for the convenience of the various policy engines running on the local server, and so can be considered entirely "operational" in nature, and even "private" if the policy engines are sufficiently tightly bound to the directory service process itself. However, to be more general, I'd simply make them "operational" and not private (as would be the case if they were really external references) so that new policy engines can be added willy-nilly. Ed ================= Ed Reed Reed-Matthews, Inc. +1 801 796 7065 http://www.Reed-Matthews.COM >>> "Albert Langer" 02/21/01 12:59PM >>> [Ed] Anyway, that's the idea we came up with. Discussion is invited, if only to cause a change in subject on the mailing list ;-) [Albert] Quick response for similar reason, as a break while still working on LDUP final call issues. I think it should be based directly on X.500 framework for administrative areas with whatever LDAP style simplifications can be achieved in those aspects that relate to operational bindings etc but no departures at all from a common conceptual framework as to how policy is inherited. Seems to me that the standards themselves and David Chadwick's online book about them point to a "natural" description that is very similar your option 5 "sparse replica". That is to treat admin points very much like "glue" entries necessary to maintain a connection from a subordinate context to the global tree. You simply replicate all superior admin points that a replicated area is nested within like any other glue. Then you use the glue style entries for those admin points at the replica to drive whatever implementation specific machinery is used to prioritize and enforce policy in strict accordance with the X.500 conceptual framework. If I understood correctly that seems to be what you saying about a "sparse replica", but integrates it with what's also needed in this context (and has been all along before dealing with multi-master) - a framework for directory distribution based on X.500 with detailed specification of operational bindings, glue entries etc. Administrative areas can't be defined independently of that framework without running into the fact that they are closely connected to it. Interesting issue relevant to current other discussions is that I suspect this replication could be an example where multi-master may be inapplicable due to the extreme hairiness of allowing for policy update conflicts. That in turn raises hairy issues about how one could combine single master partitions (even if only containing such "admin points" and other "glue"), with multi-master replicas subordinate to them on the same DSA implementation, with an overlap between the two at the innermost nested admin point. It also points to the necessity for actually implementing the LDUP WG charter to provide for single master as well as multi-master replication (the difference isn't just a "topology" but involves both conformance levels for DSAs and directory service replication requirements). Also points to need for replication management to be standardized with provisions for creating and merging replication areas etc. This may also closely relate to schema replication (for which X.500 defines similar admin points in the same conceptual framework). There are requirements about schema replication in the current requirements draft and machinery is needed to be able to coordinate schema changes with the replication of entries dependent on the schema changes - but there is no such machinery in the current architecture drafts. Similar machinery could be needed for coordination of policy changes. Any such coordination machinery has to be enforced by the conflict resolution mechanism and since none is currently specified, none is currently implemented by URP (whether or not it could do so, given that it does not retain log information that might be necessary). Then coordination machinery for any of these aspects is likely to involve something like the concepts of a "floating" or "failover" single master for that specific aspect as in the "schema master" and "infrastructure master" for AD. This is also needed to achieve eventual convegence as there is of course no way to guarantee that without some means of specifying which DSAs are currently authoritatively considered to be part of the replication network and which are excluded from it - otherwise meta-data would grow without bound while waiting for a failed DSA that isn't going to come back. Again there is no such machinery in the current architecture, consequently none in URP and no eventual convergence possible. Hmm, ... oh well, *some* of that was a "break" and it *is* all relevant to your original posting, which I have at least refrained from dissecting line by line ;-) From list@netscape.com Wed Feb 21 16:08:58 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id QAA10443 for ; Wed, 21 Feb 2001 16:08:57 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1LL79M01634; Wed, 21 Feb 2001 13:07:09 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1LL7AA17739; Wed, 21 Feb 2001 13:07:10 -0800 (PST) Resent-Date: Wed, 21 Feb 2001 13:07:10 -0800 (PST) Message-Id: X-Mailer: Novell GroupWise Internet Agent 5.5.2.1 Date: Wed, 21 Feb 2001 13:56:32 -0700 From: "Ed Reed" To: Cc: , , , , , "Ed Reed" , Subject: draft-ietf-ldup-inheritance-00.txt Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=_7229D19F.1D7C1083" Resent-Message-ID: <"3RN1mB.A.rTE.53Cl6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --=_7229D19F.1D7C1083 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Please publish the attached new internet draft. Abstract: There are several possible ways to manage inheritance of policy=20 information in a directory service. This document describes several=20 known mechanisms and recommends one for general use that can be=20 implemented using [LDUP].=20 To the LDUP and LDAPEXT working groups: This is the draftified version of my notes on inheritance mechanisms for which there is already discussion taking place on the mailing lists. I've broken out this inheritance discussion from the LDAP Subentries internet draft so as to keep the two discussions separate and on-track. To the LDUP and LDAPEXT chairs: I'd appreciate a short time to discuss this document in one or both work group meetings in Minneapolis, if you think that appropriate. To Rick: Here's wondering if it arrives in base64 encoding for you ;-) Regards, Ed =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Ed Reed Reed-Matthews, Inc. +1 801 796 7065 http://www.Reed-Matthews.COM --=_7229D19F.1D7C1083 Content-Type: text/plain Content-Disposition: attachment; filename="draft-ietf-ldup-inheritance-00.txt" Content-Transfer-Encoding: base64 DQoKCgoKCklOVEVSTkVULURSQUZUIA0KZHJhZnQtaWV0Zi1sZHVwLWluaGVyaXRhbmNlLTAwLnR4 dCANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg RWQgUmVlZCANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgUmVlZC1N YXR0aGV3cywgSW5jLiANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBGZWJydWFyeSAyMSwgMjAwMSANCiANCiAgICAgICAgICAgUG9saWN5IEluaGVyaXRhbmNlIE1l Y2hhbmlzbXMgZm9yIExEQVAgDQogDQoKCjEgIFN0YXR1cyBvZiB0aGlzIE1lbW8gDQoKIA0KVGhp cyBkb2N1bWVudCBpcyBhbiBJbnRlcm5ldC1EcmFmdCBhbmQgaXMgaW4gZnVsbCBjb25mb3JtYW5j ZSB3aXRoIGFsbCANCnByb3Zpc2lvbnMgb2YgU2VjdGlvbiAxMCBvZiBSRkMyMDI2LiANCiANCklu dGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVuZ2lu ZWVyaW5nIFRhc2sgDQpGb3JjZSAoSUVURiksIGl0cyBhcmVhcywgYW5kIGl0cyB3b3JraW5nIGdy b3Vwcy4gTm90ZSB0aGF0IG90aGVyIGdyb3VwcyANCm1heSBhbHNvIGRpc3RyaWJ1dGUgd29ya2lu ZyBkb2N1bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgDQogDQpJbnRlcm5ldC1EcmFmdHMgYXJl IGRyYWZ0IGRvY3VtZW50cyB2YWxpZCBmb3IgYSBtYXhpbXVtIG9mIHNpeCBtb250aHMgDQphbmQg bWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRz IGF0IGFueSANCnRpbWUuIEl0IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0LURyYWZ0 cyBhcyByZWZlcmVuY2UgbWF0ZXJpYWwgDQpvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAi d29yayBpbiBwcm9ncmVzcy4iICANCiANClRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJuZXQtRHJh ZnRzIGNhbiBiZSBhY2Nlc3NlZCBhdCANCmh0dHA6Ly93d3cuaWV0Zi5vcmcvaWV0Zi8xaWQtYWJz dHJhY3RzLnR4dC4gIA0KIA0KVGhlIGxpc3Qgb2YgSW50ZXJuZXQtRHJhZnQgU2hhZG93IERpcmVj dG9yaWVzIGNhbiBiZSBhY2Nlc3NlZCBhdCANCmh0dHA6Ly93d3cuaWV0Zi5vcmcvc2hhZG93Lmh0 bWwuIA0KIA0KVGhpcyBJbnRlcm5ldC1EcmFmdCBleHBpcmVzIG9uIEF1Z3VzdCAyMSwgMjAwMS4g DQogDQoKCjIgIEFic3RyYWN0IC8gRGVzY3JpcHRpb24gDQoKVGhlcmUgYXJlIHNldmVyYWwgcG9z c2libGUgd2F5cyB0byBtYW5hZ2UgaW5oZXJpdGFuY2Ugb2YgcG9saWN5IA0KaW5mb3JtYXRpb24g aW4gYSBkaXJlY3Rvcnkgc2VydmljZS4gIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIHNldmVyYWwg DQprbm93biBtZWNoYW5pc21zIGFuZCByZWNvbW1lbmRzIG9uZSBmb3IgZ2VuZXJhbCB1c2UgdGhh dCBjYW4gYmUgDQppbXBsZW1lbnRlZCB1c2luZyBbTERVUF0uIA0KCgozICBQcmVhbWJsZSANCgpB dCB0aGUgU2FuIERpZWdvIElFVEYgKDQ5KSBpbiBEZWNlbWJlciAyMDAwIGEgYmFyIGJvZmYgKDEg cm91bmQgPSAkODkgDQpvciBzbyBVU0Qgc28gdGhlcmUgd2VyZSAyMC0zMCBwZW9wbGUgaW4gYXR0 ZW5kYW5jZSkgd2FzIGNvbnZlbmVkIHRvIA0KY29uc2lkZXIgaG93IHRvIGRlYWwgd2l0aCBpbmhl cml0YW5jZSBvZiBwb2xpY3kgZG93biB0aHJvdWdoIGEgdHJlZSANCmZyb20gc3VwZXJpb3IgdG8g c3Vib3JkaW5hdGUgY29udGV4dHMuICBUaGUgdG9waWMgY2FtZSB1cCBiZWNhdXNlIGl0J3MgDQph biBpc3N1ZSBmb3IgYWNjZXNzIGNvbnRyb2wgcG9saWN5LCB3aGljaCBtYW55IG9mIHVzIHdvdWxk IGxpa2UgdG8gc2VlIA0KYmUgYWJsZSB0byBiZSBpbmhlcml0YWJsZSBmcm9tIHBhcmVudHMgdG8g Y2hpbGRyZW4sIHNvIHRoYXQgYW4gYWNjZXNzIA0KZ3JhbnRlZCB0byBhIHBhcmVudCBvciBzdXBl cmlvciBvcmdhbml6YXRpb25hbCB1bml0LCBmb3IgaW5zdGFuY2UsIA0KY291bGQgYmUgaW50ZXJw cmV0ZWQgY29ycmVjdGx5IGFzIGJlaW5nIGltcGxpY2l0bHkgZ3JhbnRlZCB0byBhbGwgdGhlIA0K c3Vib3JkaW5hdGUgZW50cmllcyBvZiB0aGF0IHBhcmVudC4gICANCiANCgoKUmVlZCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBbUGFnZSAxIG9mIDVdIA0KICAgICAg ICAgICAgICAgICAgRXhwaXJlcyBBdWd1c3QgMjEsIDIwMDEgDA0KCgpJTlRFUk5FVCBEUkFGVCAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBGZWJydWFyeSAyMSwgMjAwMSANCiAgICAgICAg ICAgICBkcmFmdC1pZXRmLWxkdXAtaW5oZXJpdGFuY2UtMDAudHh0IA0KCk90aGVyIHBvbGljeSBp bmZvcm1hdGlvbiBjb3VsZCBiZW5lZml0IGZyb20gc3VjaCBpbmhlcml0YW5jZSwgYW5kIHRoZSAN CmdlbmVyYWwgY2FzZSBpcyB0aGF0IHBvbGljeSBzZXQgYXQgdGhlIHJvb3Qgb2YgYW4gZW50ZXJw cmlzZSAoZm9yIA0KaW5zdGFuY2UpIGFkbWluaXN0cmF0aXZlIGFyZWEgaXMgYXBwbGllZCB0byB0 aGUgd2hvbGUgb2YgdGhlIA0KYWRtaW5pc3RyYXRpdmUgYXJlYSwgZXZlbiBpZiB0aGUgYWRtaW5p c3RyYXRpdmUgYXJlYSBpcyBwYXJ0aXRpb25lZCBhbmQgDQpkaXN0cmlidXRlZCBhbW9uZyBzZXZl cmFsIHNlcnZlcnMgKG9yIGdyb3VwcyBvZiBzZXJ2ZXJzKSB0aHJvdWdob3V0IHRoZSANCmVudGVy cHJpc2UuICBSZWFsIHdvcmxkIGV4YW1wbGVzIGluY2x1ZGUgTm92ZWxsIE5EUyB0cmVlcywgTWlj cm9zb2Z0IA0KQURTIEZvcmVzdHMsIGFuZCBwcm9iYWJseSB0aGluZ3MgbGlrZSB0aGUgZGlyZWN0 b3J5IGluZm9ybWF0aW9uIHRyZWUgaW4gDQpYLjUwMCBmb3IgYSBjb3VudHJ5LCBhIGdvdmVybm1l bnRhbCBhZ2VuY3kgb3IgYW55IG90aGVyIHNvcnQgb2YgbGFyZ2UgDQpvcmdhbml6YXRpb24uIA0K Cgo0ICBUaGUgUmVxdWlyZW1lbnQgDQoKVG8gc3VwcG9ydCB0aGUga2luZCBvZiB0b3AtZG93biBw b2xpY3kgaW5oZXJpdGFuY2UgZGVzY3JpYmVkIGFib3ZlLCANCnNlcnZlcnMgaG9sZGluZyBzdWJv cmRpbmF0ZSBwYXJ0aXRpb25zIG9mIHRoZSBhZG1pbmlzdHJhdGl2ZSBhcmVhIChpbiANCm90aGVy IHdvcmRzLCBzaW1wbGUgc3VidHJlZXMgcm9vdGVkIGJlbG93IHRoZSByb290IG9mIHRoZSANCmFk bWluaXN0cmF0aXZlIGFyZWEgd2hlcmUgdGhlIHBvbGljeSBpcyBzZXQpIG5lZWQgdG8gYmUgaW5m b3JtZWQgb2YgdGhlIA0KcG9saWN5IHRoYXQgdGhleSBhcmUgc3VwcG9zZWQgdG8gaW5oZXJpdCBm cm9tIGFib3ZlLiANCiANCk5vdGUgdGhhdCBJJ3ZlIG5vdCBzYWlkIGFueXRoaW5nIGFib3V0IGhv dyB0aGUgcG9saWN5IGlzIHJlcHJlc2VudGVkIA0KeWV0LiAgSXQgbWF5IGJlIHZpYSBhdHRyaWJ1 dGVzIG9uIHRoZSByb290IG9mIHRoZSBhZG1pbmlzdHJhdGl2ZSBhcmVhLCANCm9yIGl0IG1heSBi ZSB2aWEgc3ViZW50cmllcyBsb2NhdGVkIGltbWVkaWF0ZWx5IHN1Ym9yZGluYXRlIHRvIHRoZSBy b290IA0Kb2YgdGhlIGFkbWluaXN0cmF0aXZlIGFyZWEsIG9yIGJ5IHNvbWUgb3RoZXIgbWVhbnMu ICBJbiBmYWN0LCBmb3IgdGhlIA0KZ2VuZXJhbCBjYXNlIHRoYXQgaW5jbHVkZXMgdGhlIGZ1bGwg WC41MDAgc3ViZW50cnkgZGVmaW5pdGlvbiB3aXRoIA0Kc3VidHJlZSBzcGVjaWZpY2F0aW9ucyBp biB0aGUgc3ViZW50cnksIGl0J3Mgb25seSBuZWNlc3NhcnkgdGhhdCB0aGUgDQpwb2xpY3kgc3Vi ZW50cnkgYXBwbGllcyB0byB0aGUgZW50cnkgYW5kIGl0cyBhdHRyaWJ1dGVzIGJlaW5nIGdvdmVy bmVkIA0KKEkgdGhpbmsgLSBEYXZpZD8gIEhlbG11dD8gIFJpY2hhcmQ/ICBPdGhlcnM/KSANCiAN ClNvIHRoZSBxdWVzdGlvbiBpcyBob3cgdG8gbWFrZSB0aGUgc3Vib3JkaW5hdGUgcGFydGl0aW9u IG9mIHRoZSANCm5hbWVzcGFjZSwgdGhhdCBkb2VzIG5vdCBuZWNlc3NhcmlseSBjby1yZXNpZGUg b24gYSBzZXJ2ZXIgd2hlcmUgdGhlIA0KYWRtaW5pc3RyYXRpdmUgYXJlYSBpcyByb290ZWQgYW5k IHdoZXJlIHRoZSBpbmhlcml0YWJsZSBnb3Zlcm5pbmcgDQpwb2xpY3kgaXMgYXNzZXJ0ZWQsIGhv dyBkb2VzIHRoYXQgc3Vib3JkaW5hdGUgbmFtZXNwYWNlICJrbm93IiBhYm91dCANCnRoZSBpbmhl cml0ZWQgcG9saWN5IHNvIHRoYXQgaXQgY2FuIGVuZm9yY2UgaXQ/IA0KCgo1ICBQb3NzaWJsZSBB cHByb2FjaGVzIChpbmNvbXBsZXRlIGxpc3QpIA0KClRoZXJlIGFyZSBzZXZlcmFsIHdheXMgdGhp cyBoYXMgYmVlbiBhcHByb2FjaGVkIGluIHRoZSBwYXN0LCBhbmQgb25lIA0KY2FuIGltYWdpbmUg bWFueSBvdGhlcnMuIA0KIA0KMSkgVGhlIGluaGVyaXRhYmxlIHBvbGljeSBjb3VsZCBiZSBhc3Nl cnRlZCB3aGVuIHN1cGVyaW9yL3N1Ym9yZGluYXRlIA0KcmVmZXJlbmNlcyBhcmUgYmVpbmcgYWRt aW5pc3RyYXRpdmVseSBzZXQgdG8gZ2x1ZSB0aGUgdHdvIG5hbWVzcGFjZXMgDQp0b2dldGhlciwg ZWl0aGVyIG1hbnVhbGx5IGJ5IHRoZSBhZG1pbmlzdHJhdG9ycyBvciBwcm9ncmFtbWF0aWNhbGx5 IHZpYSANCnNvbWUgaGllcmFyY2hpY2FsIG9wZXJhdGlvbmFsIGJpbmRpbmcgcHJvdG9jb2wsIGZv ciBpbnN0YW5jZS4gIEkgdGhpbmsgDQp0aGlzIGlzIGhvdyBYLjUwMCBpbXBsZW1lbnRhdGlvbnMg Z2VuZXJhbGx5IGhhbmRsZSBpdC4gW0VkaXRvcjogIGNoYW5nZSANCnRoaXMgdG8gYW4gYWZmaXJt YXRpdmUgc3RhdGVtZW50IHdoZW4gdmVyaWZpZWRdIA0KIA0KMikgQSBzcGVjaWFsaXplZCBmb3Jt IG9mIHJlcGxpY2F0aW9uIHRoYXQga25vd3Mgb2YgdGhlIG5lZWQgdG8gbWFpbnRhaW4gDQpjYWNo ZWQgaW5mb3JtYXRpb24gYWdncmVnYXRlZCBmcm9tIHN1cGVyaW9yIGFkbWluaXN0cmF0aXZlIGFy ZWFzIGluIHRoZSANCmRpcmVjdG9yeSBpbmZvcm1hdGlvbiB0cmVlIHRha2VzIHJlc3BvbnNpYmls aXR5IHRvIGlkZW50aWZ5IGluaGVyaXRhYmxlIA0KaW5mb3JtYXRpb24gYW5kIHRvIG1haW50YWlu IGNvcGllcyBvZiBpdCBvbiBvciBuZWFyIHN1Ym9yZGluYXRlIA0KcGFydGl0aW9uIHJvb3RzLiAg VGhpcyBtYWtlcyB0aGUgaW5mb3JtYXRpb24gYXZhaWxhYmxlIGxvY2FsbHkgdG8gdGhlIA0Kc3Vi b3JkaW5hdGUgbmFtZXNwYWNlIGluIGEgInJlYWQtb25seSIgZmFzaGlvbiB0aGF0IGZhY2lsaXRh dGVzIA0KZGVjaXNpb24tbWFraW5nIGFuZCBtYWtlcyB0aGUgc3BlY2lhbGl6ZWQgcmVwbGljYXRp b24gc2NoZW1lIA0KcmVzcG9uc2libGUgZm9yIHByb3BhZ2F0aW5nIHBvbGljeSBjaGFuZ2VzIHRv IGFsbCB0aGUgc3Vib3JkaW5hdGVzIHdoZW4gDQpuZWVkZWQuICBUaGlzIGlzIGhvdyBOb3ZlbGwn cyBORFMgZG9lcyBpdC4gICANCgoKUmVlZCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBbUGFnZSAyIG9mIDVdIA0KICAgICAgICAgICAgICAgICAgRXhwaXJlcyBBdWd1 c3QgMjEsIDIwMDEgDA0KCgpJTlRFUk5FVCBEUkFGVCAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBGZWJydWFyeSAyMSwgMjAwMSANCiAgICAgICAgICAgICBkcmFmdC1pZXRmLWxkdXAtaW5o ZXJpdGFuY2UtMDAudHh0IA0KCiANCjMpIFNlcnZlcnMgaG9sZGluZyBzdWJvcmRpbmF0ZSBwYXJ0 aXRpb25zIG9mIGFuIGFkbWluaXN0cmF0aXZlIGFyZWEgY2FuIA0KIm9wcG9ydHVuaXN0aWNhbGx5 IGNhY2hlIiBwb2xpY3kgaW5mb3JtYXRpb24gbG9jYWxseS4gIEluIHRoaXMgDQpzY2VuYXJpbywg dGhlIGFjY2VzcyBjb250cm9sIHBvbGljeSBlbmdpbmUgKHByb2JhYmx5LCBhcyB0aGUgZGlyZWN0 IA0KY29uc3VtZXIgb2YgdGhlIGluaGVyaXRlZCBwb2xpY3kgaW5mb3JtYXRpb24gaW4gb25lIGV4 YW1wbGUpIGtub3dzIHRoYXQgDQpwb2xpY3kgaW5mb3JtYXRpb24gbWF5IGJlIGRlZmluZWQgaW4g c3VwZXJpb3IgYXJlYXMgb2YgdGhlIGRpcmVjdG9yeSANCmluZm9ybWF0aW9uIHRyZWUgdGhhdCBp dCBuZWVkcyB0byBrbm93IGFib3V0LCBhbmQgc28gaXQgIndhbGtzIHRoZSANCnRyZWUiIHVudGls IGl0IGZpbmRzIHdoYXQgaXMgY2xlYXJseSB0aGUgInRvcCIgb2YgdGhlIGF1dGhvcml0YXRpdmUg DQphZG1pbmlzdHJhdGl2ZSBhcmVhIHdpdGhpbiB3aGljaCBpdCBpcyBzdXBwb3NlZCB0byBvcGVy YXRlLiAgKEkgc2F5IGl0IA0KdGhpcyB3YXkgdG8gaGlnaGxpZ2h0IHRoYXQgdGhlIHN1Ym9yZGlu YXRlIG1heSB3ZWxsIGtub3cgaXRzIG5vdCANCnN1cHBvc2VkIHRvIHdhbGsgdGhlIHRyZWUgYWxs IHRoZSB3YXkgdG8gImRjPWNvbSIsIGZvciBpbnN0YW5jZSwgaWYgdGhlIA0Kcm9vdCBvZiB0aGUg b3JnYW5pemF0aW9ucyBhZG1pbmlzdHJhdGl2ZSBhcmVhIGlzICJkYz1vbmNhbGxkYmEsIA0KZGM9 Y29tIiwgZm9yIGluc3RhbmNlKSAgQXQgYW55IHJhdGUsIHRoZSBwb2xpY3kgZW5naW5lIHdhbGtz IHRoZSB0cmVlIA0KImFzIGZhciBhcyBpdHMgc3VwcG9zZWQgdG8gZ28iIGFjY3VtdWxhdGluZyBw b2xpY3kgaW5mb3JtYXRpb24gdGhhdCANCmFwcGxpZXMgdG8gaXQgYW5kIGNhY2hpbmcgaXQgbG9j YWxseSBmb3IgZnV0dXJlIHVzZS4gIFRoZSB3YWxrIHdvdWxkIA0KdGFrZSBwbGFjZSBhdCBzZXJ2 ZXIgc3RhcnR1cCB0aW1lLCBvciB3aGVuIHRoZSBwYXJ0aXRpb24gaXMgcGxhY2VkICJpbiANCnNl cnZpY2UiIChpZiBpdCBldmVyIGdvZXMgb2ZmIGxpbmUpLCBvciBvbiBzY2hlZHVsZWQgImhhcyBh bnl0aGluZyANCmNoYW5nZWQgSSBuZWVkIHRvIGtub3cgYWJvdXQiIHdhbGthYm91dHMuICBFYWNo IHBvbGljeSBlbmdpbmUgd291bGQgYmUgDQpyZXNwb25zaWJsZSBmb3IgaXRzIG93biBjYWNoZSBv ZiBpbmZvcm1hdGlvbiBhbmQgaXRzIG93biB3YWxrYWJvdXRzIChJIA0KbGlrZSB0aGF0IHRlcm0g Zm9yIHRoaXMuLi4pIA0KIA0KNCkgd2hlbmV2ZXIgcG9saWN5IGlzIGRlZmluZWQgYXQgYW4gYWRt aW5pc3RyYXRpdmUgcG9pbnQgdGhhdCBhcHBsaWVzIA0KdG8gc3Vib3JkaW5hdGUgZW50cmllcywg YSBwcm9jZXNzIChlaXRoZXIgY2xpZW50IG9yIHNlcnZlci1iYXNlZCwgb3IgDQpzb21lIGNvbWJp bmF0aW9uIG9mIGJvdGgpIHBlcmZvcm1zIHRoZSBpbnZlcnNlIHRvIHRoZSB3YWxrYWJvdXQgDQpk ZXNjcmliZWQgaW4gIzMgYWJvdmUgLSB0aGF0IGlzLCBpdCBkZXNjZW5kcyB0aGUgdHJlZSBkZXBv c2l0aW5nIHBvbGljeSANCmluZm9ybWF0aW9uIChvciBjaGFuZ2luZyBwb2xpY3kgaW5mb3JtYXRp b24gaXQgZmluZHMgdGhlcmUpIG9uIA0Kc3Vib3JkaW5hdGUgZW50cmllcyAoZWl0aGVyIG9uIHBh cnRpdGlvbiByb290cyBvciBvbiBlYWNoIGxlYWYgZW50cnkgDQppdHNlbGYpIGFzIGl0IGdvZXMu ICBUaGlzIGFwcHJvYWNoIGhhcyB0aGUgYmVuZWZpdCBvZiAicHVzaGluZyIgY2hhbmdlcyANCmZy b20gdGhlIHBvaW50IG9mIGFkbWluaXN0cmF0aXZlIGFjdGlvbiB0byBhbGwgdGhlIGFyZWFzIHN1 YmplY3QgdG8gdGhlIA0KcG9saWN5IGNoYW5nZSwgcmF0aGVyIHRoYW4gcmVseWluZyBvbiB0aGUg Im9wcG9ydHVuaXN0aWMgY2FjaGUiIG9mICMzLiAgDQpXaXRoIHNvbWUgY2FyZSwgaXQgbmVlZCBu b3QgYmUgYW55IG1vcmUgYmFuZHdpZHRoIGNvbnN1bWluZyB0aGFuIHRoZSANCnNwZWNpYWxpemVk IHJlcGxpY2F0aW9uIHNjaGVtZSBkZXNjcmliZWQgaW4gIzIgYWJvdmUuICBBbmQgaXMgbW9yZSAN CmR5bmFtaWMgdGhhbiB0aGUgc3RhdGljIGNvbmZpZ3VyYXRpb24gb2YgIzEgYWJvdmUuICBJIHRo aW5rIHRoaXMgaXMgDQpnZW5lcmFsbHkgaG93IE1pY3Jvc29mdCBoYW5kbGVzIGluaGVyaXRhYmxl IHBvbGljeSBmb3IgYWNjZXNzIA0KY29udHJvbHMuICBbRWRpdG9yOiAgY2hhbmdlIHRoaXMgdG8g YW4gYWZmaXJtYXRpdmUgc3RhdGVtZW50IHdoZW4gDQp2ZXJpZmllZF0gIA0KIA0KW0VkaXRvcmlh bCBub3RlIC0gdGhpcyBub3RlIGFscmVhZHkgY292ZXJzIG1vcmUgdGhhbiB3ZSBkaXNjdXNzZWQg YXQgDQp0aGUgYmFyIGJvZmZdIA0KIA0KVGhlcmUgYXJlIHByb2JhYmx5IG90aGVyIGFwcHJvYWNo ZXMuICBJbiBmYWN0LCB3ZSBjYW1lIHVwIHdpdGggb25lIG1vcmUgDQphdCB0aGUgYmFyIGJvZmYu IA0KIA0KNSkgRWFjaCBzZXJ2ZXIgaG9sZGluZyBhIHN1Ym9yZGluYXRlIHBhcnRpdGlvbiBvZiBh biBhZG1pbmlzdHJhdGl2ZSANCmFyZWEgY291bGQgYWxzbyBob2xkIGEgInNwYXJzZSByZXBsaWNh IiBvZiB0aGUgb3RoZXJ3aXNlIG5vbi1yZXNpZGVudCANCnN1cGVyaW9yIGFkbWluaXN0cmF0aXZl IGFyZWFzIHRoYXQgaG9sZCBwb2xpY3kgaW5mb3JtYXRpb24gcmVsZXZhbnQgdG8gDQp0aGUgcGFy dGl0aW9uIGl0IGRvZXMgaG9sZC4gIFRoaXMgYXBwcm9hY2ggd291bGQgYWxsb3cgTERVUCB0byBi ZSANCnJlc3BvbnNpYmxlIGZvciBwcm9wYWdhdGluZyBjaGFuZ2VzIHRvIHBvbGljeSAiYXMgd3Jp dHRlbiIgdG8gDQpzdWJvcmRpbmF0ZSBzZXJ2ZXJzIHRoYXQgbmVlZCBpdCwgYXZvaWRzIGNyZWF0 aW5nIHNwZWNpYWxpemVkIA0KbWVjaGFuaXNtcyB0aGF0IG5lZWQgdG8ga25vdyBob3cgdG8gYWdn cmVnYXRlIHBvbGljeSBpbmZvcm1hdGlvbiANCnRocm91Z2ggbXVsdGlwbGUgdGllcnMgb2YgYWRt aW5pc3RyYXRpdmUgYXJlYSByb290cyAoc29tZXRoaW5nIGJvdGggIzIgDQphbmQgIzQgcmVxdWly ZSwgYW5kIHNvbWV0aGluZyBJIGZvciBvbmUgcmVhbGx5LCByZWFsbHksIHJlYWxseSBkb24ndCAN CndhbnQgdG8gdHJ5IHRvIGdlbmVyYWxpemUgZm9yIGEgc3RhbmRhcmQpLCBsZWF2ZXMgaW50ZXJw cmV0YXRpb24gb2YgDQpzdXBlcmlvciBwb2xpY3kgZW50aXJlbHkgdXAgdG8gdGhlIGxvY2FsIHBv bGljeSBkZWNpc2lvbiBmdW5jdGlvbnMgDQood2hlcmUgaXQgYmVsb25ncykgYW5kICJvbmx5IiBy ZXF1aXJlcyByZWFkLW9ubHkgcmVwbGljYXMgb2YgdGhlIA0Kc3VwZXJpb3IgYWRtaW5pc3RyYXRp dmUgcm9vdCBlbnRyeSBhbmQgaXRzIHN1YmVudHJpZXMuICAgDQogDQoKUmVlZCAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBbUGFnZSAzIG9mIDVdIA0KICAgICAgICAg ICAgICAgICAgRXhwaXJlcyBBdWd1c3QgMjEsIDIwMDEgDA0KCgpJTlRFUk5FVCBEUkFGVCAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBGZWJydWFyeSAyMSwgMjAwMSANCiAgICAgICAgICAg ICBkcmFmdC1pZXRmLWxkdXAtaW5oZXJpdGFuY2UtMDAudHh0IA0KCkJlaW5nICJyZWFkLW9ubHki IHJlcGxpY2FzLCB0aGUgTERVUCBob3VzZSBrZWVwaW5nIGlzIGtlcHQgdG8gYSBtaW5pbXVtIA0K KGJlY2F1c2UgdGhlcmUgd2lsbCBuZXZlciBiZSBjaGFuZ2VzIGZsb3dpbmcgZnJvbSB0aGUgc3Vi b3JkaW5hdGUgY29weSANCnRvIHRoZSBhZG1pbmlzdHJhdGl2ZSBhcmVhIHJvb3QgIm1hc3RlciIg cmVwbGljYSkuICBUaGVyZSB3aWxsIGJlIA0KcmVwbGljYXRpb24gdHJhZmZpYywgd2hpY2ggY2Fu IGJlIHNjaGVkdWxlZCBvciBldmVudCBkcml2ZW4uICBUaGUgDQpzcGFyc2UgcmVwbGljYSByZXBs aWNhdGlvbiBhZ3JlZW1lbnRzIGNhbiBiZSBzZXQgdmlhIGFkbWluaXN0cmF0b3JzIHRvIA0KY29u dHJvbCBob3cgb3Igd2hhdCBzdWJlbnRyaWVzIGFyZSByZXBsaWNhdGVkIChtYXliZSBvbmx5IHRo b3NlIGZsYWdnZWQgDQoiaW5oZXJpdGFibGUiKS4gIEFzIGEgcmVhZC1vbmx5IHJlcGxpY2EsIGl0 IGNhbiBiZSBjb25maWd1cmVkIHZpYSANCnRyYW5zaXRpdmUgc3luY2ggdG8gdGFrZSBpdHMgY2hh bmdlcyBmcm9tIGFub3RoZXIgcmVhZC1vbmx5IHJlcGxpY2Egc28gDQp5b3UgZG9uJ3QgSEFWRSB0 byBoYXZlIHRoZSBzaXR1YXRpb24gd2hlcmUgZXZlcnkgc2VydmVyIGluIHRoZSANCmVudGVycHJp c2UgaXMgYmFuZ2luZyBhd2F5IGF0IHRoZSByb290LW1vc3QgbWFzdGVyIHNlcnZlciBmb3IgcG9s aWN5IA0KaW5mb3JtYXRpb24sIHNvIHdlIHNob3VsZCBiZSBhYmxlIHRvIG1hbmFnZSB0aGUgbmV0 d29yayB0cmFmZmljIHNjYWxpbmcgDQppc3N1ZXMgaW4gbGFyZ2UgdHJlZXMgKHRob3VnaCBpdHMg dHJ1ZSB0aGF0IHVzaW5nIHRyYW5zaXRpdmUgc3luY2ggDQpsZW5ndGhlbnMgdGhlIHRpbWUgaXQg dGFrZXMgZm9yIGNoYW5nZXMgdG8gcHJvcGFnYXRlIHRvIGFsbCBzZXJ2ZXJzKS4gIA0KQW5kLCBp ZiB5b3UgZG9uJ3QgbmVlZCBpdCwgZG9uJ3QgdXNlIGl0LiAgIA0KIA0KVGhpcyBpcyBlZmZlY3Rp dmVseSBob3cgTm92ZWxsIG1hbmFnZXMgc2NoZW1hIHBvbGljeSBwcm9wYWdhdGlvbiANCnRocm91 Z2ggdGhlaXIgdHJlZXMsIGFuZCBbbWF5IJYgRWRpdG9yOiB2ZXJpZnldIGFsc28gaG93IE1pY3Jv c29mdCANCmhhbmRsZXMgc2NoZW1hIHByb3BhZ2F0aW9uIHRocm91Z2ggdGhlaXIgZm9yZXN0cy4g DQogDQpUaGUgY29vbCB0aGluZyBpcyB0aGF0IHRoaXMgYXBwcm9hY2ggd29ya3MgZm9yIGFueSBu dW1iZXIgb2YgDQppbmhlcml0YWJsZSBwb2xpY3kgaW5mb3JtYXRpb24sIGluY2x1ZGluZyBzY2hl bWEsIHBhc3N3b3JkIHBvbGljeSwgZXRjLiANCmFzIHdlbGwgYXMgZm9yIGFjY2VzcyBjb250cm9s IGluZm9ybWF0aW9uLiANCgoKNiAgQ29uY2x1c2lvbiBhbmQgUmVjb21tZW5kYXRpb24gDQoKVGhl IHJlc3VsdCBvZiB0aGUgYmFyIGJvZmYgd2FzIHRoZSBwdWJsaWNhdGlvbiBvZiB0aGlzIG5vdGUu ICAgDQogDQpUaGUgcmVjb21tZW5kYXRpb24gb2YgdGhpcyBub3RlIGlzIHRoYXQgbWVjaGFuaXNt ICM1IGFib3ZlIGJlIHVzZWQgdG8gDQpwcm9wYWdhdGUgcG9saWN5IGluZm9ybWF0aW9uIHVzaW5n IExEVVAgd2hlbiBzdWJvcmRpbmF0ZSBwYXJ0aXRpb25zIG9mIA0KYSBkaXJlY3RvcnkgaW5mb3Jt YXRpb24gdHJlZSBuZWVkIHRvIGtub3cgYWJvdXQgaW5oZXJpdGVkIHBvbGljeSB0aGF0IA0KYWZm ZWN0cyB0aGVtLiAgVGhlIGFwcHJvYWNoIGhhcyB0aGUgYmVuZWZpdHMgb2YgaGF2aW5nIGNvbnNp ZGVyYWJsZSANCm9wZXJhdGlvbmFsIGV4cGVyaWVuY2UgaW4gZW50ZXJwcmlzZS1zY2FsZSBkaXJl Y3RvcnkgZGVwbG95bWVudHMsIHVzZXMgDQpbTERVUF0gaW4gYSBtYW5uZXIgY29uc2lzdGVudCB3 aXRoIGl0cyBpbnRlbmRlZCB1c2FnZSwgYXZvaWRzIHRyeWluZyB0byANCmNyZWF0ZSBhIG5ldyBn ZW5lcmFsaXplZCBkZXNjcmlwdGlvbiBvZiBpbmhlcml0YW5jZSBhZ2dyZWdhdGlvbiAoYW5kIA0K bGVhdmVzIHRoYXQgdG8gdGhlIGFwcGxpY2F0aW9ucyB3aG8gd2lsbCBkZWZpbmUgdGhlaXIgb3du IHJlcXVpcmVkIA0Kc2VtYW50aWNzLCBhbnl3YXkpLCBhbmQgZ2VuZXJhbGx5IGFjY29tcGxpc2hl cyB0aGUgKGxpbWl0ZWQpIG9iamVjdGl2ZXMgDQpzZXQgb3V0IGluIHRoZSByZXF1aXJlbWVudCBz dGF0ZW1lbnQgYWJvdmUuIA0KIA0KCgo3ICBSZWZlcmVuY2VzIA0KCltMRFVQXSByZWZlcnMgdG8g dGhlIGNvbGxlY3Rpb24gb2YgSW50ZXJuZXQgZHJhZnRzIGFuZCBSRkNzIHdoaWNoIA0KZGVzY3Jp YmUgdGhlIHJlcXVpcmVtZW50cywgYXJjaGl0ZWN0dXJlLCBzY2hlbWEsIGNvbmZsaWN0IHJlc29s dXRpb24gDQpwcm9jZWR1cmVzLCBldGMuIHRoYXQgYXJlIGF2YWlsYWJsZSBmcm9tIHRoZSBMRFVQ IGhvbWUgcGFnZTogDQogICAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvaHRtbC5jaGFydGVycy9sZHVw LWNoYXJ0ZXIuaHRtbCANCgoKOCAgQ29weXJpZ2h0IE5vdGljZSANCgpDb3B5cmlnaHQgKEMpIFRo ZSBJbnRlcm5ldCBTb2NpZXR5ICgyMDAxKS4gQWxsIFJpZ2h0cyBSZXNlcnZlZC4gIA0KIA0KVGhp cyBkb2N1bWVudCBhbmQgdHJhbnNsYXRpb25zIG9mIGl0IG1heSBiZSBjb3BpZWQgYW5kIGZ1cm5p c2hlZCB0byANCm90aGVycywgYW5kIGRlcml2YXRpdmUgd29ya3MgdGhhdCBjb21tZW50IG9uIG9y IG90aGVyd2lzZSBleHBsYWluIGl0IG9yIA0KYXNzaXN0IGluIGl0cyBpbXBsZW1lbnRhdGlvbiBt YXkgYmUgcHJlcGFyZWQsIGNvcGllZCwgcHVibGlzaGVkIGFuZCANCgpSZWVkICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFtQYWdlIDQgb2YgNV0gDQogICAgICAgICAg ICAgICAgICBFeHBpcmVzIEF1Z3VzdCAyMSwgMjAwMSAMDQoKCklOVEVSTkVUIERSQUZUICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIEZlYnJ1YXJ5IDIxLCAyMDAxIA0KICAgICAgICAgICAg IGRyYWZ0LWlldGYtbGR1cC1pbmhlcml0YW5jZS0wMC50eHQgDQoKZGlzdHJpYnV0ZWQsIGluIHdo b2xlIG9yIGluIHBhcnQsIHdpdGhvdXQgcmVzdHJpY3Rpb24gb2YgYW55IGtpbmQsIA0KcHJvdmlk ZWQgdGhhdCB0aGUgYWJvdmUgY29weXJpZ2h0IG5vdGljZSBhbmQgdGhpcyBwYXJhZ3JhcGggYXJl IA0KaW5jbHVkZWQgb24gYWxsIHN1Y2ggY29waWVzIGFuZCBkZXJpdmF0aXZlIHdvcmtzLiBIb3dl dmVyLCB0aGlzIA0KZG9jdW1lbnQgaXRzZWxmIG1heSBub3QgYmUgbW9kaWZpZWQgaW4gYW55IHdh eSwgc3VjaCBhcyBieSByZW1vdmluZyB0aGUgDQpjb3B5cmlnaHQgbm90aWNlIG9yIHJlZmVyZW5j ZXMgdG8gdGhlIEludGVybmV0IFNvY2lldHkgb3Igb3RoZXIgDQpJbnRlcm5ldCBvcmdhbml6YXRp b25zLCBleGNlcHQgYXMgbmVlZGVkIGZvciB0aGUgcHVycG9zZSBvZiBkZXZlbG9waW5nIA0KSW50 ZXJuZXQgc3RhbmRhcmRzIGluIHdoaWNoIGNhc2UgdGhlIHByb2NlZHVyZXMgZm9yIGNvcHlyaWdo dHMgZGVmaW5lZCANCmluIHRoZSBJbnRlcm5ldCBTdGFuZGFyZHMgcHJvY2VzcyBtdXN0IGJlIGZv bGxvd2VkLCBvciBhcyByZXF1aXJlZCB0byANCnRyYW5zbGF0ZSBpdCBpbnRvIGxhbmd1YWdlcyBv dGhlciB0aGFuIEVuZ2xpc2guIA0KIA0KVGhlIGxpbWl0ZWQgcGVybWlzc2lvbnMgZ3JhbnRlZCBh Ym92ZSBhcmUgcGVycGV0dWFsIGFuZCB3aWxsIG5vdCBiZSANCnJldm9rZWQgYnkgdGhlIEludGVy bmV0IFNvY2lldHkgb3IgaXRzIHN1Y2Nlc3NvcnMgb3IgYXNzaWducy4gDQogDQpUaGlzIGRvY3Vt ZW50IGFuZCB0aGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGhlcmVpbiBpcyBwcm92aWRlZCBvbiBh biANCiJBUyBJUyIgYmFzaXMgYW5kIFRIRSBJTlRFUk5FVCBTT0NJRVRZIEFORCBUSEUgSU5URVJO RVQgRU5HSU5FRVJJTkcgDQpUQVNLIEZPUkNFIERJU0NMQUlNUyBBTEwgV0FSUkFOVElFUywgRVhQ UkVTUyBPUiBJTVBMSUVELCBJTkNMVURJTkcgQlVUIA0KTk9UIExJTUlURUQgVE8gQU5ZIFdBUlJB TlRZIFRIQVQgVEhFIFVTRSBPRiBUSEUgSU5GT1JNQVRJT04gSEVSRUlOIFdJTEwgDQpOT1QgSU5G UklOR0UgQU5ZIFJJR0hUUyBPUiBBTlkgSU1QTElFRCBXQVJSQU5USUVTIE9GIE1FUkNIQU5UQUJJ TElUWSBPUiANCkZJVE5FU1MgRk9SIEEgUEFSVElDVUxBUiBQVVJQT1NFLiIgDQogDQoKCjkgIEF1 dGhvcpJzIEFkZHJlc3MgDQoKRWR3YXJkcyBFLiBSZWVkIA0KUmVlZC1NYXR0aGV3cywgSW5jLiAN CjEwNjQgRSAxNDAgTm9ydGggDQpMaW5kb24sIFVUICA4NDA0MiANClVTQSANCkUtbWFpbDogZWVy QG9uY2FsbGRiYS5jb20gIA0KICAgICAgDQpMRFVQIE1haWxpbmcgTGlzdDogaWV0Zi1sZHVwQGlt Yy5vcmcgIA0KTERBUEVYVCBNYWlsaW5nIExpc3Q6IGlldGYtbGRhcGV4dEBuZXRzY2FwZS5jb20g DQoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKClJlZWQgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgW1BhZ2UgNSBvZiA1XSANCiAgICAgICAgICAgICAgICAgIEV4cGlyZXMg QXVndXN0IDIxLCAyMDAxIAw= --=_7229D19F.1D7C1083-- From list@netscape.com Fri Feb 23 06:47:36 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id GAA27803 for ; Fri, 23 Feb 2001 06:47:36 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1NBjuM21181; Fri, 23 Feb 2001 03:45:56 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1NBjtw19680; Fri, 23 Feb 2001 03:45:55 -0800 (PST) Resent-Date: Fri, 23 Feb 2001 03:45:55 -0800 (PST) Message-Id: <200102231145.GAA27527@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ietf-ldapext@netscape.com From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-ldapext-cldap-01.txt Date: Fri, 23 Feb 2001 06:45:09 -0500 Sender: nsyracus@cnri.reston.va.us Resent-Message-ID: <"C8sPL.A.IzE.y1kl6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the LDAP Extension Working Group of the IETF. Title : Connection-less Lightweight Directory Access Protocol Author(s) : L. Johasson, R. Hedberg Filename : draft-ietf-ldapext-cldap-01.txt Pages : 9 Date : 22-Feb-01 This memo describes modifications to LDAP version 3[1] to allow transport of a subset of the LDAP protocol over connection-less transport. The case of UDP/IP is covered in detail in this memo but other transport layers are possible. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ldapext-cldap-01.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ldapext-cldap-01.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ldapext-cldap-01.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20010222133148.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ldapext-cldap-01.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ldapext-cldap-01.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20010222133148.I-D@ietf.org> --OtherAccess-- --NextPart-- From list@netscape.com Fri Feb 23 08:47:55 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id IAA01340 for ; Fri, 23 Feb 2001 08:47:50 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1NDhiM29408; Fri, 23 Feb 2001 05:43:44 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1NDhiU17410; Fri, 23 Feb 2001 05:43:44 -0800 (PST) Resent-Date: Fri, 23 Feb 2001 05:43:44 -0800 (PST) To: rans@infoseek.com From: Subject: GREAT LOOKS MEANS GREAT SKIN: For men and women with sensitive skin! MIME-Version: 1.0 Content-Type: text/plain; charset=unknown-8bit Message-ID: <079644921111721NTFM339@ntfm339.facility.pipex.com> Date: 23 Feb 2001 11:22:17 +0000 Resent-Message-ID: <"T6OL6C.A.mPE.Pkml6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com DewDrops is a non-oily facial emollient, which soothes and heals sensitive, allergic and aging skin. Designed by a nutritionist/master herbalist, this unique formula nourishes from the outside in with its vitamin and herbal make-up. Find out for yourself why people are giving up Lancome, Clinique and other expensive products for DewDrops. Here are some of their comments: "I will never be without my DewDrops." "This is miracle stuff." "You should get this patented." "The fine lines around my eyes are gone, I love it." "My acne is nearly gone." "I had patches of dry skin and eczema on my face and now its gone." Note the satisfaction guarantee: 1 ounce bottle sells for $20.00 plus $4.00 S&H suggested use = 3-5 drops per day..1 bottle last ~ 5.5 months Please print this email and fill out the form below then mail it to: Red Apple Nutrition Services 17 Windsor Avenue Medford, OR 97504 Or call TOLL-FREE @ 877-93-APPLE (877-932-7753) ------------- Order Form --------------- Full Name: __________________________________________ Street Address: _____________________________________ City/State/Zip Code: ______________ / ___ / _________ Daytime Phone: ______________________________________ Evening Phone: ______________________________________ Email Address: ______________________________________ ( ) Please call me so that I can place an order. ( ) Please remove my email address from any future mailings. ( ) I am sending payment via check or money order with this form. If paying by check please make check payable to Red Apple Nutrition Services. Please allow 5-7 Business Days for Check Processing. Please specify number of bottles that you wish to order ___________ From list@netscape.com Sat Feb 24 14:39:24 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA21748 for ; Sat, 24 Feb 2001 14:39:24 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1OJbHM24508; Sat, 24 Feb 2001 11:37:17 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1OJbIo22620; Sat, 24 Feb 2001 11:37:18 -0800 (PST) Resent-Date: Sat, 24 Feb 2001 11:37:18 -0800 (PST) Message-Id: <200102241936.LAA21214@breakaway.Stanford.EDU> X-Mailer: exmh version 2.0.2 2/24/98 Subject: ietf-asid list archives? To: ietf-asid@umich.edu, LDAP extensions From: Jeff.Hodges@kingsmountain.com Reply-to: LDAP extensions Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Sat, 24 Feb 2001 11:36:13 -0800 Sender: hodges@breakaway.Stanford.EDU Resent-Message-ID: <"22jjGB.A.EhF.s1Am6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Does anyone have archives of the ietf-asid list? if so I'd like to obtain a copy (cheap disk sectors are screaming to be filled). thanks, JeffH From list@netscape.com Sun Feb 25 15:06:02 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id PAA12695 for ; Sun, 25 Feb 2001 15:06:02 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1PK41M24980; Sun, 25 Feb 2001 12:04:02 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1PK42610084; Sun, 25 Feb 2001 12:04:02 -0800 (PST) Resent-Date: Sun, 25 Feb 2001 12:04:02 -0800 (PST) Message-Id: <5.0.2.1.0.20010225104854.00ab2c20@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Sun, 25 Feb 2001 12:03:08 -0800 To: ietf-ldapext@netscape.com From: "Kurt D. Zeilenga" Subject: CLDAP comments Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"SjH1-C.A.CdC.xUWm6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com It seems the one rational for CLDAP is to overcome certain host operating limitations. I don't find this a compelling rational for undertaking this work. These limitations are not that of LDAP, but of the host operating system. There are OS-specific methods for working around these limitations. The key rational is to reduce the transport overhead of issuing small sets of operations upon a server. I believe CLDAP is generally only applicable if the size of the set of operations is near 1 (per session) and the number of response pdu's per request is near 2 (entry + result). In other cases, the overhead of adding basic reliability (client got the complete answer for the question asked) to UDP is far greater than the overhead of TCP. Hence, I believe the approach used in RFC1798 is actually quite sound for the limited applicability of connection-less LDAP. In RFC1798 CLDAP, a client either got "all" or "nothing". That is, it sent a request and either got back a response (or duplicates) and got nothing. Hence, a client could time-out waiting for the response and reissue if it got "nothing". Duplicate responses could be ignored. Simple but effective. In the I-D, the client waits for result. Assuming the client receives at least one result PDU for the request, upon receipt of this PDU, the client has no mechanism to determine whether the subset of responses (ignoring duplicates) is complete or not. I believe there needs to some mechanism which the client can use to determine that it has received all responses. Without this, the usefulness of the protocol is, IMO, severely limited. I note that as RFC 1798 is a Proposed Standard and details a service with default listener on udp/389 and the I-D suggested protocol is not compatible with RFC 1798, a different port should be used. Kurt From list@netscape.com Sun Feb 25 20:14:25 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA14235 for ; Sun, 25 Feb 2001 20:14:25 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1Q1CJM10436; Sun, 25 Feb 2001 17:12:20 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1Q1CLc03823; Sun, 25 Feb 2001 17:12:21 -0800 (PST) Resent-Date: Sun, 25 Feb 2001 17:12:21 -0800 (PST) Message-Id: <5.0.2.1.0.20010225170054.00aca050@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Sun, 25 Feb 2001 17:10:42 -0800 To: "Ryan Moats" From: "Kurt D. Zeilenga" Subject: Re: Document status questions... Cc: In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"EdbkND.A.V7.z1am6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 02:20 PM 2/16/01 -0600, Ryan Moats wrote: >While working on a draft that references draft-ietf-ldapext-locate-04, I >noticed that it seems to be expired in time if not in actuality. Since >draft-ietf-ldapext-ldap-taxonomy-04 is still languishing having cleared >WG last call (I've refreshed it once to keep it alive in the repository >and I forsee another refresh in April) for this draft to finish and I >don't recall having seen much discussion on the mailing list, I'm >wondering of the status of this document is? I wonder, too. What are the outstanding issues? Kurt From list@netscape.com Mon Feb 26 03:32:25 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id DAA02802 for ; Mon, 26 Feb 2001 03:32:24 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1Q8Uh019291; Mon, 26 Feb 2001 00:30:43 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1Q8UjM23536; Mon, 26 Feb 2001 00:30:45 -0800 (PST) Resent-Date: Mon, 26 Feb 2001 00:30:45 -0800 (PST) From: Subject: Willing to work from home?? Earn Serious Cash Date: Mon, 26 Feb 2001 03:33:03 Message-Id: <681.499237.415177@yahoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"fOKcbB.A.LvF.zQhm6"@glacier> To: ietf-ldapext@netscape.com Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Dear Friend and Future Millionaire, My wife received this e-mail and forwarded it to me to review. We've both read completely through it and have been in contact with some of the individuals listed below. We think it's an excellent opportunity that is well worth the small investment of time and money, and believe that you will, too! CRH AS SEEN ON NATIONAL TV: Making over half million dollars every 4 to 5 months from your home for an investment of only $25 U.S. Dollars expense one time THANKS TO THE COMPUTER AGE AND THE INTERNET ! BE A MILLIONAIRE LIKE OTHERS WITHIN A YEAR!!! Before you say ''Bull'', please read the following. This is the letter you have been hearing about on the news lately. Due to the popularity of this letter on the Internet, a national weekly news program recently devoted an entire show to the investigation of this program described below, to see if it really can make people money. The show also investigated whether or not the program was legal. Their findings proved once and for all that there are ''absolutely NO Laws prohibiting the participation in the program and if people can -follow the simple instructions, they are bound to make some mega bucks with only $25 out of pocket cost''. DUE TO THE RECENT INCREASE OF POPULARITY & RESPECT THIS PROGRAM HASATTAINED, IT IS CURRENTLY WORKING BETTER THAN EVER. This is what one had to say: ''Thanks to this profitable opportunity. I was approached many times before but each time I passed on it. I am so glad I finally joined just to see what one could expect in return for the minimal effort and money required. To my astonishment, I received total $610,470.00 in 21weeks, with money still coming in." Pam Hedland, Fort Lee, New Jersey -------------------------------------------------------------------------------- Here is another testimonial: "This program has been around for a long time but I never believed in it. But one day when I received this again in the mail I decided to gamble my $25 on it. I followed the simple instructions and walaa ...... 3 weeks later the money startedto come in. First month I only made $240.00 but the next 2 months after that I made a total of $290,000.00. So far, in the past 8 months by re-entering the program, I have made over $710,000.00 and I am playing it again. The key to success in this program is to follow the simple steps and NOT change anything.'' More testimonials later but first, -------------------------------------------------------------------------------- ===== PRINT THIS NOW FOR YOUR FUTURE REFERENCE ====== If you would like to make at least $500,000 every 4 to 5 months easily and comfortably, please read the following... THEN READ IT AGAIN and AGAIN!!! FOLLOW THE SIMPLE INSTRUCTIONS BELOW AND YOUR FINANCIAL DREAMS WILL COME TRUE, GUARANTEED! INSTRUCTIONS: Order all 5 reports shown on the list below For each report, send $5 CASH, THE NAME & NUMBER OF THE REPORT YOU ARE ORDERING and YOUR E-MAIL ADDRESS to the person whose name appears ON THAT LIST next to the report. MAKE SURE YOUR RETURN ADDRESS IS ON YOUR ENVELOPE TOP LEFT CORNER in case of any mail problems. When you place your order, make sure you order each of the 5 reports. You will need all 5 reports so that you can save them on your computer and resell them. YOUR TOTAL COST $5 X 5=$25.00. Within a few days you will receive, vie e-mail, each of the 5 reports from these 5 different individuals. Save them on your computer so they will be accessible for you to send to the 1,000's of people who will order them from you. Also make a floppy of these reports and keep it on your desk in case something happens to your computer. IMPORTANT - DO NOT alter the names of the people who are listed next to each report, or their sequence on the list, in any way other than what is instructed below in step '' 1 through 6 '' or you will loose out on a majority of your profits. Once you understand the way this works, you will also see how it does not work if you change it. Remember, this method has been tested, and if altered, it will NOT work !!! People have tried to put their friends/relatives names on all five thinking they could get all the money. But it does not work this way. Believe us, and Do Not try to change anything other than what is instructed. If you do, it will not work for you. Remember, honesty reaps the reward!!! -------------------------------------------------------------------------------- 1.... After you have ordered all 5 reports, take this advertisement and REMOVE the name & address of the person in REPORT # 5. This person has made it through the cycle and is no doubt counting their fortune 2.... Move the name & address in REPORT # 4 down to REPORT # 5. 3.... Move the name & address in REPORT # 3 down TO REPORT # 4. 4.... Move the name & address in REPORT # 2 down TO REPORT # 3. 5.... Move the name & address in REPORT # 1 down TO REPORT # 2 6.... Insert YOUR name & address in the REPORT # 1 Position. PLEASE MAKE SURE you copy every name & address ACCURATELY! **** Take this entire letter, with the modified list of names, and save it on your computer. DO NOT MAKE ANY OTHER CHANGES. Save this on a disk as well, just in case you loose any data. To assist you with marketing your business on the internet, the 5 reports you purchase will provide you with invaluable marketing information which includes how to send bulk e-mails legally, where to find thousands of free classified ads and much more. There are 2 Primary methods to get this venture going: METHOD # 1: BY SENDING BULK E-MAIL LEGALLY Let's say that you decide to start small, just to see how it goes, and we will assume you and those involved send out only 5,000 e-mails each. Let's also assume that the mailing receive only a 0.2% response (the response could be much better but lets just say it is only 0.2%. Also many people will send out hundreds of thousands e-mails instead of only 5,000 each). Continuing with this example, you send out only 5,000 e-mails. With a 0.2% response, that is only 10 orders for report # 1. Those 10 people responded by sending out 5,000 e-mail each for a total of 50,000. Out of those 50,000 e-mails only 0.2% responded with orders. That's=100 people responded and ordered Report # 2. Those 100 people mail out 5,000 e-mails each for a total of 500,000 e-mails. The 0.2% response to that is 1000 orders for Report # 3. Those 1000 people send out 5,000 e-mails each for a total of 5 million e-mails sent out. The 0.2% response to that is 10,000 orders for Report # 4. Those 10,000 people send out 5,000 e-mails each for a total of 50,000,000 (50 million) e-mails. The 0.2% response to that is 100,000 orders for Report # 5 THAT'S 100,000 ORDERS TIMES $5 EACH=$500,000.00 (half million). Your total income in this example is: 1..... $50 + 2..... $500 + 3..... $5,000 + 4 ... $50,000 + 5..... $500,000 ........ Grand Total=$555,550.00 NUMBERS DO NOT LIE. GET A PENCIL & PAPER AND FIGURE OUT THE WORST POSSIBLE RESPONSES AND NO MATTER HOW YOU CALCULATE IT, YOU WILL STILL MAKE A LOT OF MONEY ! -------------------------------------------------------------------------------- REMEMBER FRIEND, THIS IS ASSUMING ONLY 10 PEOPLE ORDERING OUT OF 5,000 YOU MAILED TO. Dare to think for a moment what would happen if everyone or half or even one 4th of those people mailed 100,000 e-mails each or more? There are over 150 million people on the Internet worldwide and counting. Believe me, many people will do just that, and more! -------------------------------------------------------------------------------- METHOD # 2 : BY PLACING FREE ADS ON THE INTERNET Advertising on the net is very very inexpensive and there are hundreds of FREE places to advertise. Placing a lot of free ads on the Internet will easily get a larger response. We strongly suggest you start with Method # 1 and add METHOD # 2 as you go along. For every $5 you receive, all you must do is e-mail them the Report they ordered. That's it. Always provide same day service on all orders. This will guarantee that the e-mail they send out, with your name and address on it, will be prompt because they can not advertise until they receive the report. ========= AVAILABLE REPORTS ============= ORDER EACH REPORT BY ITS NUMBER & NAME ONLY. Notes: ============================================== Always send $5 cash (U.S. CURRENCY only) for each Report. Checks NOT accepted. Make sure the cash is concealed by wrapping it in at least 2 sheets of paper. On one of those sheets of paper, Write a.The NUMBER & the NAME of the Report you are ordering, b. YOUR E-MAIL ADDRESS and c. your name and postal address. (In case of mail difficulties.) PLACE YOUR ORDER FOR THESE REPORTS NOW : REPORT #1 "The Insider's Guide to Advertising for Freeon the Net" ORDER REPORT #1 FROM: A.T. Ramser 171 Culpeper St. Warrenton, VA 20186 ______________________________________________________ REPORT #2 "The Insider's Guide to Sending Bulk E-mail on the Net" ORDER REPORT #2 FROM: Kimik P. O. Box 175 Alta Loma, CA 91701-0175 USA ______________________________________________________ REPORT #3 "The Secrets to Multilevel Marketing on the Net" ORDER REPORT #3 FROM: Christopher Baker 5579 Eastwood Avenue Rancho Cucamonga, CA91737-2100 USA ______________________________________________________ REPORT #4 "How to become a Millionaire Utilizing the Power of MLM and the Net" ORDER REPORT #4 FROM: Michael Brown 6439 Zircon Avenue Alta Loma, CA 91701 USA ______________________________________________________ REPORT #5 "How to Send Out One Million e-mails for Free" ORDER REPORT #5 FROM: Aynn Stoddard 1330 Albright Avenue Upland, CA 91786 USA You can KEEP TRACK of your PROGRESS by watching which report people are ordering from you. IF YOU WANT TO GENERATE MORE INCOME SEND ANOTHER BATCH OF E-MAILS AND START THE WHOLE PROCESS AGAIN. ____________________________________________________________ $$$$$$$$$ YOUR SUCCESS GUIDELINES $$$$$$$$$$$ Follow these guidelines to guarantee your success: === If you do not receive at least 10 orders for Report #1 within 2 weeks, continue sending e-mails until you do. === After you have received 10 orders, 2 to 3 weeks after that you should receive 100 orders or more for REPORT # 2. If you did not, continue advertising or sending e-mails until you do. === Once you have received 100 or more orders for Report # 2, YOU CAN RELAX, because the system is already working for you, and the cash will continue to roll in ! THIS IS IMPORTANT TO REMEMBER: Every time your name is moved down on the list, you are placed in front of a Different report. There is NO LIMIT to the income you can generate from this business !!! ====================================================== FOLLOWING IS A NOTE FROM THE ORIGINATOR OF THIS PROGRAM: You have just received information that can give you financial freedom for the rest of your life, with NO RISK and JUST A LITTLE BIT OF EFFORT. You can make more money in the next few weeks and months than you have ever imagined. Follow the program EXACTLY AS INSTRUCTED. Do Not change it in any way. It works exceedingly well as it is now. Remember to e-mail a copy of this exciting report after you have put your name and address in Report #1 and moved others to #2 ..........# 5 as instructed above. One of the people you send this to may send out 100,000 or more e-mails and your name will be on every one of them. Remember though, the more you send out the more potential customers you will reach. So my friend, I have given you the ideas, information, materials and opportunity to become financially independent. IT IS UP TO YOU NOW ! ============ MORE TESTIMONIALS ================ "My name is Mitchell. My wife, Jody and I live in Chicago. I am an accountant with a major U.S. Corporation and I make pretty good money. When I received this program I grumbled to Jody about receiving ''junk mail''. I made fun of the whole thing, spouting my knowledge of the population and percentages involved. I ''knew'' it wouldn't work. Jody totally ignored my supposed intelligence and a few days later she jumped in with both feet. I made merciless fun of her, and was ready to lay the old ''I told you so'' on her when the thing didn't work. Well, the laugh was on me! Within 3 weeks she had received 50 responses. Within the next 45 days she had received total $ 147,200.00 ........... all cash! I was shocked. I have joined Jody in her ''hobby''. Mitchell Wolf M.D., Chicago, Illinois ====================================================== ''Not being the gambling type, it took me several weeks to make up my mind to participate in this plan. But conservative that I am, I decided that the initial investment was so little that there was just no way that I wouldn't get enough orders to at least get my money back''. '' I was surprised when I found my medium size post office box crammed with orders. I made $319,210.00 in the first 12 weeks. The nice thing about this deal is that it does not matter where people live. There simply isn't a better investment with a faster return and so big." Dan Sondstrom, Alberta, Canada ======================================================= ''I had received this program before. I deleted it, but later I wondered if I should have given it a try. Of course, I had no idea who to contact to get another copy, so I had to wait until I was e-mailed again by someone else.........11 months passed then it luckily came again...... I did not delete this one! I made more than $490,000 on my first try and all the money came within 22 weeks." Susan De Suza, New York, N.Y. ======================================================= ''It really is a great opportunity to make relatively easy money with little cost to you. I followed the simple instructions carefully and within 10 days the money started to come in. My first month I made $20,560.00 and by the end of third month my total cash count was $362,840.00. Life is beautiful, Thanks to internet.". Fred Dellaca, Westport, New Zealand ======================================================= ORDER YOUR REPORTS TODAY AND GET STARTED ON 'YOUR' ROAD TO FINANCIAL FREEDOM ! ======================================================= About 50,000 new people get online every month! _______________________________________________________ FOR YOUR INFORMATION.... If you need help with starting a business, registering a business name, learning how income tax is handled, etc., contact your local office of the Small Business Administration (a Federal agency) 1-(800)827-5722 for free help and answers to questions. Also, the Internal Revenue Service offers free help via telephone and free seminars about business tax requirements. Under Bill S1618 Title III passed by the 105th US Congress this letter cannot be considered spam as long as the sender includes contact information and a method of removal. This is a one time e-mail transmission. No request for removal is necessary. If you have any questions of the legality of this program, contact the Office of Associate Director for Marketing Practices, Federal Trade Commission, Bureau of Consumer Protection, Washington, D.C. To have your address removed from any further mailings please press HERE, type your email address in the subject header and your address will be removed thru our automated process. Thank you From list@netscape.com Mon Feb 26 10:36:03 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id KAA12740 for ; Mon, 26 Feb 2001 10:36:02 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1QFXp023179; Mon, 26 Feb 2001 07:33:52 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1QFXpk02047; Mon, 26 Feb 2001 07:33:51 -0800 (PST) Resent-Date: Mon, 26 Feb 2001 07:33:51 -0800 (PST) From: 32898138@700spot08@excite.com Message-Id: <200102261533.HAA04210@scaup.prod.itd.earthlink.net> Date: Mon, 26 Feb 01 07:20:19 EST To: 3939000101-1@yahoo.com Subject: FWD: This was never intended to reach your eyes... Resent-Message-ID: <"uFFdGD.A.Zf.ddnm6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com ========================================================================== ========================================================================== READY TO KNOW? CONFIDENTIAL! The KIT They Want BANNED In all 50 STATES. Why? Because these secrets were never intended to reach your eyes... Get the facts on anyone! Locate Missing Persons, find Lost Relatives, obtain Addresses and Phone Numbers of old school friends, even Skip Trace Dead Beat Spouses. This is not a Private Investigator, but a sophisticated KIT DESIGNED to automatically CRACK YOUR CASE with links to thousands of Public Record databases. Find out SECRETS about your relatives, friends, enemies, and everyone else! Even your spouse! With the New, INTERNET SPY KIT AND YOU! It's absolutely astounding! Here's what you can learn. License plate number! Get anyone's name and address with just a license plate number! (Find that Person you met in traffic!) Driving record! Get anyone's driving record! Social security number! Trace anyone by social security number! Address! Get anyone's address with just a name! Unlisted phone numbers! Get anyone's phone number with just a name even unlisted numbers! Locate! Long lost friends, relatives, a past lover who broke your heart! E-mail! Send anonymous e-mail completely untraceable! Dirty secrets! Discover dirty secrets your in-laws don't want you to know! Investigate anyone! Use the sources that private investigators use (all on the Internet) Secretly! Ex-spouse! Learn how to get information on an ex-spouse that will help you win in court! (Dig up old skeletons)! Criminal search Background check! Find out about your daughter's boyfriend! Find out! If you are being investigated! Neighbors! Learn all about your mysterious neighbors! Find out what they have to hide! People you work with! Be astonished by what you'll learn about people you work with! Education verification! Did he really graduate college? Find out! Internet Spy and You! THIS KIT will help you discover ANYTHING about anyone, with Click-able hyperlinks and no typing in internet addresses! Just Open the page and Go! You will be shocked and amazed by the secrets that can be discovered about absolutely everyone! Find out the secrets they don't want you to know! About others, about yourself! It's INCREDIBLE what you can find out using Internet Spy Kit! You'll be riveted to your computer screen! Get the KIT they're trying to ban! Before it's too late! LIMITED TIME OFFER ORDER TODAY! Only $25.00 We will RUSH YOU our Internet Spy Kit and You can begin discovering all the secrets you ever wanted to know! You can Know EVERYTHING about ANYONE with our Internet Spy kit and Your computer. Works with all browsers and all versions of AOL! ORDER TODAY. DON'T WAIT TO GET STARTED...It's fast and easy CREDIT CARD ORDERS ONLY Call or Fax your order in today! Phone Orders Call: 1(480) 990-4463 ASK FOR EXT. 1 Fax Orders To: 1-413-235-6585 Name: ________________________________________ Address: ________________________________________ City/State/Zip: ______________________________________ Email Address to Ship Orders to: _____________________________________ FOR CREDIT CARD ORDERS ONLY! Account Number: ____________________________________ Exp. Date: ________________________ DISCLAIMER: The seller of this powerful resource kit will not be held responsible for how the purchaser chooses to use it's resources. Thank you ****************Remove Instructions******************** ******************************************************** To be removed from future mailings!!!! All REMOVE requests AUTOMATICALLY honored upon receipt. mailto:nogoz1@excite.com?subject=REMOVESPY PLEASE understand that any effort to disrupt, close or block this REMOVE account can only result in difficulties for others wanting to be removed from our mailing list as it will be impossible to take anyone off the list if the remove instruction is not received. ******************************************************* From list@netscape.com Mon Feb 26 15:04:27 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id PAA24814 for ; Mon, 26 Feb 2001 15:04:26 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1QK2QM26851; Mon, 26 Feb 2001 12:02:27 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1QK2RI09116; Mon, 26 Feb 2001 12:02:27 -0800 (PST) Resent-Date: Mon, 26 Feb 2001 12:02:27 -0800 (PST) Message-Id: <5.0.2.1.0.20010226120016.00a5bec0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Mon, 26 Feb 2001 12:01:37 -0800 To: LDAP extensions From: "Kurt D. Zeilenga" Subject: Re: ietf-asid list archives? In-Reply-To: <200102241936.LAA21214@breakaway.Stanford.EDU> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"LSROUB.A.EOC.RZrm6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 11:36 AM 2/24/01 -0800, Jeff.Hodges@kingsmountain.com wrote: >Does anyone have archives of the ietf-asid list? if so I'd like to obtain a >copy (cheap disk sectors are screaming to be filled). If you find an archive, send me a copy. I'll put a browsable, searchable interface up on the web. Kurt From list@netscape.com Mon Feb 26 17:31:01 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA01359 for ; Mon, 26 Feb 2001 17:31:00 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1QMSOM22091; Mon, 26 Feb 2001 14:28:24 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1QMSPs23436; Mon, 26 Feb 2001 14:28:25 -0800 (PST) Resent-Date: Mon, 26 Feb 2001 14:28:25 -0800 (PST) Message-ID: <386720012126224936220@lineone.net> X-EM-Version: 5, 0, 0, 16 X-EM-Registration: #01B0530810E603002D00 From: "melissa" To: "Internet Biz Opps"@scooby.lineone.net Subject: PLEASE READ..YOU COULD EARN UP TO $80,000 Date: Mon, 26 Feb 2001 22:49:36 -00 MIME-Version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id f1QMSLv23387 Resent-Message-ID: <"sgzmt.A.htF.Gitm6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit It is NEW, and an INCREDIBLY EXCITING way to earn $$$$$$ It is like NOTHING you have ever seen on the net today!! Imagine being given the answers to the first ten questions in that millionaire's show with your lifelines still intact. Actually, it is even BETTER than that!! Your income will not only continue, but will also grow month after month, year after year. And guess what.... You can join for FREE and MAKE MONEY!!! Or you can pay a VERY small one time amount and make EVEN MORE MONEY!!!!! YOU COULD BE EARNING AS MUCH AS $80,000!!!!!!! Once your earnings START, they NEVER STOP! The quicker you register the quicker you will reap the REWARDS!!! If you are interested in gaining a financially secure future and building a good home business then you have to check this out. After all, YOU HAVE NOTHING TO LOSE, ONLY TO GAIN!! To find out more information on how to become an $80,000 earner please click on the link below: cashsuccess@angelfire.com?subject=info --------------------------------------------------- E-Mail Removal/Deletion Instructions I received your e-mail as someone interested in Internet Business Opportunities and apologise if I received your e-mail in error. I comply with proposed federal legislation regarding unsolicited commercial email by providing you with a method for your email address to be permanently removed from my database. If you wish to be removed from this list please click on the link below and you will be IMMEDIATELY and AUTOMATICALLY blocked from ANY future mailings. cashsuccess@angelfire.com?subject=remove --------------------------------------------------- From list@netscape.com Mon Feb 26 17:31:31 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA01405 for ; Mon, 26 Feb 2001 17:31:31 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1QMSv024004; Mon, 26 Feb 2001 14:28:57 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1QMSvE24146; Mon, 26 Feb 2001 14:28:57 -0800 (PST) Resent-Date: Mon, 26 Feb 2001 14:28:57 -0800 (PST) x-mimeole: Produced By Microsoft Exchange V6.0.4658.0 content-class: urn:content-classes:message Subject: RE: Updated Result Code for LDAP Controls draft - draft-armijo-ldap-control-error-01.txt MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Mon, 26 Feb 2001 14:23:21 -0800 Message-ID: <96BABA22ECEAEA45B53D08D63E1B56780526AD14@DF-SPIKE.platinum.corp.microsoft.com> Thread-Topic: Updated Result Code for LDAP Controls draft - draft-armijo-ldap-control-error-01.txt Thread-Index: AcCQnppXxU/rY/KNTyizd0/jJMi6xgPo11vQ From: "Michael Armijo" To: "Michael Armijo" , , X-OriginalArrivalTime: 26 Feb 2001 22:23:21.0817 (UTC) FILETIME=[BA2CFC90:01C0A042] Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id f1QMSsv24079 Resent-Message-ID: <"SMmzBB.A.e4F.nitm6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit Are there any additional comments on this draft? If not, I would like to release a .02 version to be considered for last call. I plan to submit the next rev tomorrow (2/27). Please send any additional comments on the .01 draft ASAP. -----Original Message----- From: Michael Armijo Sent: Tuesday, February 06, 2001 4:02 PM To: John.Liang@openwave.com; ietf-ldapext@netscape.com Subject: RE: Updated Result Code for LDAP Controls draft - draft-armijo-ldap-control-error-01.txt The main goal of this draft is to not overload existing result codes (like 'other'). Likewise, this result code should not be overloaded. That is the reason for the 'SHOULD NOT be used to represent... existing result code' wording. This is particularly important for controls that will primarily make use of the operation response field for error handling. That said, there will be controls (such as Sort and VLV) that wish to have control-specific result codes returned via an embedded result field. In these cases, the best practice would be to return controlError in the operation response and to return any results relevant to the control in the embedded response. Re-reading the draft, I can see where there might be some ambiguity about this. I will update the wording (pending any more comments) and send out an updated draft to the list. Michael > -----Original Message----- > From: John Liang [mailto:John.Liang@openwave.com] > Sent: Tuesday, February 06, 2001 1:39 PM > To: Michael Armijo; ietf-ldapext@netscape.com > Subject: RE: Updated Result Code for LDAP Controls draft - > draft-armijo-ldap-control-error-01.txt > > > HI Michael, > > As in the following part of the draft, > > The controlError SHOULD NOT be used to represent any condition that > can be defined using any existing result code in RFC 2251. > > Does that mean for instance, if there is 'noSuchAttribute' error > happened for Server side sorting, both the searchResultDone > and the sssResponseControl would return 'noSuchAttribute' error? > > And only if the error can not be found in RFC 2251 like > 'sortContolMissing' for VLV, this new controlError will be > used in searchResultDone message. > > Thanks, > -- > John Liang > > > -----Original Message----- > > From: Michael Armijo [mailto:micharm@Exchange.Microsoft.com] > > Sent: Monday, February 05, 2001 3:23 PM > > To: ietf-ldapext@netscape.com > > Subject: Updated Result Code for LDAP Controls draft - > > draft-armijo-ldap-control-error-01.txt > > > > > > Here is the updated version of the LDAP Control error draft. > > > > Please review and comment on the updated draft. I would > like to pursue > > this being progressed as a PS ASAP so we can move forward on the VLV > > draft. > > > > thanks, > > Michael > > > > > From list@netscape.com Tue Feb 27 01:55:44 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id BAA21494 for ; Tue, 27 Feb 2001 01:55:43 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1R6rR007308; Mon, 26 Feb 2001 22:53:27 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1R6rSM06611; Mon, 26 Feb 2001 22:53:28 -0800 (PST) Resent-Date: Mon, 26 Feb 2001 22:53:28 -0800 (PST) From: vqsrotts@hotmail.com Message-ID: <000021c92d44$0000773f$00007777@mc3.law5.hotmail.com> To: Subject: CHANGE YOUR LIFE AND LIVE YOUR DREAMS! 30583 Date: Tue, 27 Feb 2001 01:45:16 -1700 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 3 X-MSMail-Priority: Normal Resent-Message-ID: <"N5isSD.A.vmB.m70m6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: quoted-printable Would you and your family Enjoy a better life if you knew = how to:

Get out of Debt and STAY OUT OF DEBT?

Lawfully and ethically ELIMINATE YOUR INCOME TAXES - past, present and fut= ure?

PROTECT WHAT YOU OWN from liens, levies, judgments and seizures?

Achieve true FINANCIAL INDEPENDENCE?

Sure, we all have dreams - luxurious travel, beautiful homes, top-notch ed= ucation for our kids, comfortable retirement, generous giving to those in = need, the list goes on and on.

But how many of us will keep on dreaming and how many of us will actually = MAKE IT HAPPEN?

IT'S TIME TO TAKE CONTROL OF YOUR FINANCES AND YOUR FUTURE!

And, you can build a 6-figure income by sharing this information with othe= rs.

CALL NOW 800-224-1637

My mission is to help other people develop their life-long dreams. I am l= ooking for those people who are committed to that BIG picture and are not = afraid to work for it. Here's how:

- Let me show you how you can get those monkeys off your back: income taxe= s (personal and business), liens, etc.

- Share the same information through your own home business enterprise, ne= tting $1000 to $5000 per sale, paid directly to you
- No special skills or equipment required. No "inventory" to keep
- No personal "selling" or "explaining" - complete information system does= the explaining for you
- Full training and endless support in an environment of utmost integrity<= BR> - Free enterprise in its purest form, not MLM or franchise
- Exceptional products, not "vitamins, lotions, and potions"
- Lead generation system that brings qualified prospects to you


CALL NOW - 800-224-1637

Success is a matter of choice, your choice always.

Prosperous Regards!

To be removed from future mailings reply to this email
Under Bill s.1618 TITLE III passed by the 105th U.S. Congress
this letter can not be considered spam as long as
a Remove Link is included. reply to be removed.


 From list@netscape.com Tue Feb 27 04:52:48 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id EAA02347 for ; Tue, 27 Feb 2001 04:52:48 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1R9of022395; Tue, 27 Feb 2001 01:50:41 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1R9ohw14819; Tue, 27 Feb 2001 01:50:43 -0800 (PST) Resent-Date: Tue, 27 Feb 2001 01:50:43 -0800 (PST) Message-Id: <200102270949.f1R9ncu86255@lists.su.se> X-Mailer: exmh version 2.1.1 10/15/1999 To: "Kurt D. Zeilenga" cc: ietf-ldapext@netscape.com Subject: Re: CLDAP comments In-Reply-To: Message from "Kurt D. Zeilenga" of "Sun, 25 Feb 2001 12:03:08 PST." <5.0.2.1.0.20010225104854.00ab2c20@router.boolean.net> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 Date: Tue, 27 Feb 2001 10:49:13 +0100 From: Leif Johansson Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id f1R9oev14759 Resent-Message-ID: <"3n6n1D.A.5mD.xh3m6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit Hi Kurt, The example stated in the draft, i.e that of a cip proxy service, is a valid one. Operational experience from the GIDS project shows that tcp overhead is a problem in the case of one request and multiple responses (in this case references are received from the index). A similar situation is when a directory server is used as a replacement of a NIS server (i.e rfc2307). Furthermore the work in rfc 1798 contains two essentially independent parts, one beeing the udp-transport and the other beeing the combination of several results into one pdu. In the spirit of LDAPv3 it would seem like a better idea (imho) to create an extension which regardless of transport ships multiple results in a single pdu. There are several possible solutions to the problem of determining when results have been received, how many etc etc. In fact many of the comments you made are already noted in the draft but I believe that it is better to solve them within the framework of LDAPv3 extensions than to stay with an fundamentally different PDU format. I would also suggest that whatever happens to this draft rfc 1798 be moved to historic. It might be interesting to get an ADs input on the last comment: given the fact that rfc1798 and this draft is not compatible (even though it is easy for a server to tell them apart) can they, and if so under what circumstances, share the same assigned port? Cheers Leif From list@netscape.com Tue Feb 27 05:26:33 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id FAA02698 for ; Tue, 27 Feb 2001 05:26:33 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1RAOUM09321; Tue, 27 Feb 2001 02:24:30 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1RAOUU23613; Tue, 27 Feb 2001 02:24:30 -0800 (PST) Resent-Date: Tue, 27 Feb 2001 02:24:30 -0800 (PST) Mime-Version: 1.0 X-Sender: hoytkesterson@mail.earthlink.net Message-Id: Date: Tue, 27 Feb 2001 03:23:04 -0700 To: OSI Directory List , IETF LDAP From: "Hoyt L. Kesterson II" Subject: the 4th edition of X.500 Content-Type: text/plain; charset="us-ascii" ; format="flowed" Resent-Message-ID: <"wjKyXD.A.hwF.cB4m6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Hello all Erik Andersen has merged all the approved Technical Corrigenda and Amendments, including Related Entry, into the 2001 edition. Erik has spent a tremendous amount of time and effort doing this. We all owe him a cheer for a job well done. These documents were approved at the last ITU-T SG7 meeting in Geneva in early February, 2001. ISO/IEC must still ballot the Related Entry FDAM (they may chose to ballot the merged 2001 texts instead). The documents will then be prepared for publication. Published standards will be removed from this server. Until then they can be found in pdf and word formats at ftp://ftp.bull.com/pub/OSIdirectory/4thEditionTexts/ Normally I would end this message with a warning to get these standards from the server before they are published. However ITU is allowing any three recommendations to be downloaded at no cost from their server. It is an interesting experiment that they are evaluating for 2001. For more information see http://www.itu.int/publications/bookshop/how-to-buy.html The more devious among you will notice that it is possible to abuse the service. Please try to restrain yourself. Since these are copyrighted documents, one should not napsterize them. hoyt From list@netscape.com Tue Feb 27 10:35:05 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id KAA12717 for ; Tue, 27 Feb 2001 10:35:04 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1RFVIM03806; Tue, 27 Feb 2001 07:31:19 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1RFVJA14771; Tue, 27 Feb 2001 07:31:19 -0800 (PST) Resent-Date: Tue, 27 Feb 2001 07:31:19 -0800 (PST) Message-ID: <3A9BC841.4C853D5B@netscape.com> Date: Tue, 27 Feb 2001 10:31:13 -0500 From: mcs@netscape.com (Mark C Smith) Organization: iPlanet E-Commerce Solutions X-Mailer: Mozilla 4.75 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: "Kurt D. Zeilenga" CC: LDAP extensions Subject: Re: ietf-asid list archives? References: <5.0.2.1.0.20010226120016.00a5bec0@router.boolean.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Resent-Message-ID: <"do1VJC.A.FmD.Fh8m6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 7bit "Kurt D. Zeilenga" wrote: > > At 11:36 AM 2/24/01 -0800, Jeff.Hodges@kingsmountain.com wrote: > >Does anyone have archives of the ietf-asid list? if so I'd like to obtain a > >copy (cheap disk sectors are screaming to be filled). > > If you find an archive, send me a copy. I'll put a browsable, > searchable interface up on the web. There is a partial archive here: http://groups.yahoo.com/group/ietf-asid/ But it only covers 11/1997 through the present. The old archive that was at ftp://terminator.rs.itd.umich.edu/ietf-asid/archive has apparently been deleted (I am sure it was really large). -Mark From list@netscape.com Tue Feb 27 11:50:22 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id LAA17191 for ; Tue, 27 Feb 2001 11:50:21 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1RGmA007461; Tue, 27 Feb 2001 08:48:10 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1RGmAA20798; Tue, 27 Feb 2001 08:48:10 -0800 (PST) Resent-Date: Tue, 27 Feb 2001 08:48:10 -0800 (PST) From: 64352395@excite.com Message-Id: <200102271647.IAA18984@falcon.prod.itd.earthlink.net> Date: Tue, 27 Feb 01 09:03:00 EST To: i0o0o08054ksg@yahoo.com Subject: . Investigate anyone! find out anything about anyone.. Resent-Message-ID: <"e9jP5C.A.VEF.Hp9m6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com READY TO KNOW? CONFIDENTIAL! The KIT They Want BANNED In all 50 STATES. Why? Because these secrets were never intended to reach your eyes... Get the facts on anyone! Locate Missing Persons, find Lost Relatives, obtain Addresses and Phone Numbers of old school friends, even Skip Trace Dead Beat Spouses. This is not a Private Investigator, but a sophisticated KIT DESIGNED to automatically CRACK YOUR CASE with links to thousands of Public Record databases. Find out SECRETS about your relatives, friends, enemies, and everyone else! Even your spouse! With the New, INTERNET SPY KIT AND YOU! It's absolutely astounding! Here's what you can learn. License plate number! Get anyone's name and address with just a license plate number! (Find that Person you met in traffic!) Driving record! Get anyone's driving record! Social security number! Trace anyone by social security number! Address! Get anyone's address with just a name! Unlisted phone numbers! Get anyone's phone number with just a name even unlisted numbers! Locate! Long lost friends, relatives, a past lover who broke your heart! E-mail! Send anonymous e-mail completely untraceable! Dirty secrets! Discover dirty secrets your in-laws don't want you to know! Investigate anyone! Use the sources that private investigators use (all on the Internet) Secretly! Ex-spouse! Learn how to get information on an ex-spouse that will help you win in court! (Dig up old skeletons)! Criminal search Background check! Find out about your daughter's boyfriend! Find out! If you are being investigated! Neighbors! Learn all about your mysterious neighbors! Find out what they have to hide! People you work with! Be astonished by what you'll learn about people you work with! Education verification! Did he really graduate college? Find out! Internet Spy and You! THIS KIT will help you discover ANYTHING about anyone, with Click-able hyperlinks and no typing in internet addresses! Just Open the page and Go! You will be shocked and amazed by the secrets that can be discovered about absolutely everyone! Find out the secrets they don't want you to know! About others, about yourself! It's INCREDIBLE what you can find out using Internet Spy Kit! You'll be riveted to your computer screen! Get the KIT they're trying to ban! Before it's too late! LIMITED TIME OFFER ORDER TODAY! Only $25.00 We will RUSH YOU our Internet Spy Kit and You can begin discovering all the secrets you ever wanted to know! You can Know EVERYTHING about ANYONE with our Internet Spy and Your Software. Works with all browsers and all versions of AOL! ORDER TODAY. DON'T WAIT TO GET STARTED...It's fast and easy ORDER TODAY. SEND ONLY $25.00 US CASH, CHECK, OR CREDIT CARD (you may also send one of your own address labels for accuracy if you have one). Foreign money orders must be payable on a US BANK AND IN US FUNDS! NO EXCEPTIONS! DON'T WAIT TO GET STARTED...It's as easy as 1, 2, 3. STEP 1 - Print the order form text below. STEP 2 - Type or print your order information into the order form section. STEP 3 - Mail order form and payment to the address below are fax check are credit card to 1-520-244-5912. Live operator taking orders now 1-308-534-2098 Send to: Information Factory PO BOX 795 North Platte, Ne 69103 U.S.A. Name: ________________________________________ Address: ________________________________________ City/State/Zip: ______________________________________ FOR CREDIT CARD ORDERS ONLY! Account Number: ____________________________________ Exp. Date: ________________________ If you would like to fax a check, paste your check below and fax it to our office along with the EZ Order Form forms to: 1-520-244-5912. ********************************************************** ***24 HOUR FAX SERVICES*** PLEASE PASTE YOUR CHECK HERE AND FAX IT TO US AT 1-520-244-5912. ********************************************************** If You fax a check, there is no need for you to mail the original. We will draft a new check, with the exact information from your original check. All checks will be held for bank clearance. (7-10 days) Make payable to: "Information Factory" DISCLAIMER: The seller of this powerful software resource will not be held responsible for how the purchaser chooses to use it's resources. Thank you ****************Remove Instructions******************** ******************************************************** To be removed from future mailings!!!! All REMOVE requests AUTOMATICALLY honored upon receipt. href="mailto:notinterested21@yahoo.com?subject=REMOVE"mailto:notinterested21@yahoo.com?subject=REMOVE PLEASE understand that any effort to disrupt, close or block this REMOVE account can only result in difficulties for others wanting to be removed from our mailing list as it will be impossible to take anyone off the list if the remove instruction is not received. ******************************************************* From list@netscape.com Tue Feb 27 14:07:57 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA24286 for ; Tue, 27 Feb 2001 14:07:56 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1RJ5XM11675; Tue, 27 Feb 2001 11:05:33 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1RIxPg08538; Tue, 27 Feb 2001 10:59:25 -0800 (PST) Resent-Date: Tue, 27 Feb 2001 10:59:25 -0800 (PST) Message-Id: <5.0.2.1.0.20010227075920.00a824f0@router.boolean.net> X-Sender: guru@router.boolean.net X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Tue, 27 Feb 2001 10:15:27 -0800 To: Leif Johansson From: "Kurt D. Zeilenga" Subject: Re: CLDAP comments Cc: ietf-ldapext@netscape.com In-Reply-To: <200102270949.f1R9ncu86255@lists.su.se> References: <5.0.2.1.0.20010225104854.00ab2c20@router.boolean.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Resent-Message-ID: <"5iMqG.A.iAC.Bk_m6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 10:49 AM 2/27/01 +0100, Leif Johansson wrote: >The example stated in the draft, i.e that of a cip proxy service, is a >valid one. Operational experience from the GIDS project shows that tcp >overhead is a problem in the case of one request and multiple responses >(in this case references are received from the index). A similar situation >is when a directory server is used as a replacement of a NIS server >(i.e rfc2307). I concur that there are applications of connection-less LDAP (I believe they are limited). My concern (which I didn't state very clearly in my past post) was that the I-D put too much focus on overcoming operating system limitations and not enough on the primary rational, reducing transport overhead expense. >Furthermore the work in rfc 1798 contains two essentially independent >parts, one beeing the udp-transport and the other beeing the combination >of several results into one pdu. I think these are quite dependent parts in that the combining responses into one result PDU was specifically introduce to effectively deal with the transport characteristics of UDP without introducing other significant client/server/network overheads. By point is that CLDAP (RFC1798) is very simple and this is good thing. I agree that the approach has limitations (such as the significant result size limitations), but that these limitations only impact a faction of the set of target applications. Your index application might be in that faction. >In the spirit of LDAPv3 it would seem >like a better idea (imho) to create an extension which regardless of >transport ships multiple results in a single pdu. I see updating CLDAP (RFC1798) to support LDAPv3 features as a completely different task than providing a UDP mapping to LDAPv3. It's my view that the while CLDAP might not met all applications needs in regards to low-transport over access to the directory, that CLDAP is a viable solution for many of these applications. >There are several >possible solutions to the problem of determining when results have been >received, how many etc etc. In fact many of the comments you made are >already noted in the draft but I believe that it is better to solve them >within the framework of LDAPv3 extensions than to stay with an fundamentally >different PDU format. I agree that there are numerous methods for adding reliability features to protocols running over UDP. Providing means for a client to: a) detect whether it has the complete result b) remove duplicates from the result c) reorder the responses into server generated order is rather straight forward. Yes, one could use a control mechanism to provide such. If we assume such a control was added to your I-D, I am not sure your retry semantics are sound. In particular, your suggestion to reuse message ids (in the face of late arriving PDU from prior uses) might be problematic. Without details of your mechanism to detect whether a retry is needed, it's hard for me to comment. What concerns me is that the "complexity" of message id reuse upon detecting a, b, c on subsequent uses. It is also not clear how the retry mechanism would avoid repeated retries due to seemly repeatable failures. >I would also suggest that whatever happens to this draft rfc 1798 be moved >to historic. It might be interesting to get an ADs input on the last >comment: given the fact that rfc1798 and this draft is not compatible (even >though it is easy for a server to tell them apart) can they, and if so under >what circumstances, share the same assigned port? Well, if LDAPext is defining "LDAPv3 over UDP" as opposed to "CLDAPv3", then I would think we should: a) reflect this in the charter (by dropping the sentence "The group will expand on the work developed for LDAPv2 in RFC 1798"). b) progress an I-D stating that CLDAP is historic, and c) push forward on "LDAPv3 over UDP". However, if LDAPext actually does end up defining CLDAPv3, then CLDAPv3 should just obsolete RFC 1798. So, for now, I don't see an over From list@netscape.com Tue Feb 27 18:45:39 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id SAA05212 for ; Tue, 27 Feb 2001 18:45:39 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1RNfl012318; Tue, 27 Feb 2001 15:41:47 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1RNfmY23058; Tue, 27 Feb 2001 15:41:48 -0800 (PST) Resent-Date: Tue, 27 Feb 2001 15:41:48 -0800 (PST) Date: Tue, 27 Feb 2001 15:41:36 -0800 (PST) Message-Id: <200102272341.f1RNfZQ08155@ywing.netscape.com> From: dxjfs@aol.com To: yvekl@Netfriends.netscape.com Reply-To: t2m20@bigfoot.com Subject: THE SECRET the IRS is TERRIFIED you'll learn! [pyarz] Resent-Message-ID: <"JCQajC.A.4nF.6sDn6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com THE SECRET the IRS is TERRIFIED you'll learn! --------------------------------------------- - YOU OWE NO FEDERAL INCOME TAX - and never have! Millions of Americans already have learned the truth and have dropped OUT of the system - (the IRS now admits that, as of 1996, at least 85 MILLION "taxpayers" are legally no longer filing) - AND SO CAN YOU! Even the Federal Courts themselves have verified that it's true! Sure, this sounds crazy or scary! You've been carefully trained by the government's propaganda for decades! So, how can 1 out of 3 Americans be living the good life WITHOUT paying tribute to the IRS? To learn the truth, and to get the details. Put "Taxfree" in the Subject box. mailto:tm22@bigfoot.com?subject=Taxfree Please Note... Should this email address be down. Please "Fax" your response instead, with your email address___, and the words "Send TAXFREE Info" to: 305-425-3205. Have a Great Day! "A Wise Person Always Investigates What a Fool Person Takes For Granted" PS: To be removed from the list, just put "Remove" in subject line and send. From list@netscape.com Wed Feb 28 03:30:08 2001 Received: from netscape.com (r2d2.netscape.com [205.217.237.47]) by ietf.org (8.9.1a/8.9.1a) with SMTP id DAA00105 for ; Wed, 28 Feb 2001 03:30:08 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f1S8Ru015844; Wed, 28 Feb 2001 00:27:56 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f1S8Rx215334; Wed, 28 Feb 2001 00:27:59 -0800 (PST) Resent-Date: Wed, 28 Feb 2001 00:27:59 -0800 (PST) Message-Id: <200102280827.f1S8R0u87365@lists.su.se> X-Mailer: exmh version 2.1.1 10/15/1999 To: "Kurt D. Zeilenga" cc: ietf-ldapext@netscape.com Subject: Re: CLDAP comments In-reply-to: Your message of "Tue, 27 Feb 2001 10:15:27 PST." <5.0.2.1.0.20010227075920.00a824f0@router.boolean.net> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 Date: Wed, 28 Feb 2001 09:26:33 +0100 From: Leif Johansson Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by aka.mcom.com id f1S8Ruv15279 Resent-Message-ID: <"jiQOrD.A.6uD.NaLn6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Content-Transfer-Encoding: 8bit The "focus" on operating system limitations is just one sencence which can easily be removed wo impact on the argument. You are right that the mechanism of combining results in a single PDU was concieved for the express purpouse of overcoming UDP problems but I still claim that the following is true: 1. Combining results in a single PDU is be a useful mechanism over any transport (UDP or TCP). This should be written up as a separate I-D. 2. Although CLDAP is very simple it is limited in that it does not allow extensions or controls. In fact I claim that even if the draft were to be amended by saying that a "single-pdu-multiple-responses" control/extension SHOULD be used in most situations, then the draft would _still_ be better than 1798 by allowing further extensions to be added to LDAP/UDP. I do not propose making this change though. My feeling is that if LDAP/UDP is to have any chance of success it needs to be folded into the framework of LDAPv3 even at the cost of creating an admittedly non-compatible break with RFC1789. I am not sure that I understand your problems with message id reuse. Could you perhaps give an example? Please note that I do not claim that this mechanism is the solution to all problems! Cheers Leif From list@netscape.com Wed Feb 28 20:00:46 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA04028 for ; Wed, 28 Feb 2001 20:00:45 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f210wkM13516; Wed, 28 Feb 2001 16:58:46 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f210wmA07554; Wed, 28 Feb 2001 16:58:48 -0800 (PST) Resent-Date: Wed, 28 Feb 2001 16:58:48 -0800 (PST) Message-ID: <6B33416BC4BBD411BCA6009027D0D18C014E2370@aspams01.ca.com> From: "Ramsay, Ron" To: Leif Johansson , "Kurt D. Zeilenga" Cc: ietf-ldapext@netscape.com Subject: RE: CLDAP comments Date: Thu, 1 Mar 2001 11:57:50 +1100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: text/plain; charset="iso-8859-1" Resent-Message-ID: <"84xTE.A.g1B.G7Zn6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Hi, Regarding combining results into a single PDU, I note that this would be imcompatible with the LDAP ASN.1 definitions. It is a good strategy to send multiple PDUs in a single packet, but this can be done independently of the specification (we do it). It is simply an implementation detail that, if considered important, can be pointed out in an aside. Ron. -----Original Message----- From: Leif Johansson [mailto:leifj@it.su.se] Sent: Wednesday, 28 February 2001 19:27 To: Kurt D. Zeilenga Cc: ietf-ldapext@netscape.com Subject: Re: CLDAP comments The "focus" on operating system limitations is just one sencence which can easily be removed wo impact on the argument. You are right that the mechanism of combining results in a single PDU was concieved for the express purpouse of overcoming UDP problems but I still claim that the following is true: 1. Combining results in a single PDU is be a useful mechanism over any transport (UDP or TCP). This should be written up as a separate I-D. 2. Although CLDAP is very simple it is limited in that it does not allow extensions or controls. In fact I claim that even if the draft were to be amended by saying that a "single-pdu-multiple-responses" control/extension SHOULD be used in most situations, then the draft would _still_ be better than 1798 by allowing further extensions to be added to LDAP/UDP. I do not propose making this change though. My feeling is that if LDAP/UDP is to have any chance of success it needs to be folded into the framework of LDAPv3 even at the cost of creating an admittedly non-compatible break with RFC1789. I am not sure that I understand your problems with message id reuse. Could you perhaps give an example? Please note that I do not claim that this mechanism is the solution to all problems! Cheers Leif From list@netscape.com Wed Feb 28 21:41:23 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id VAA07329 for ; Wed, 28 Feb 2001 21:41:23 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f212djM00296; Wed, 28 Feb 2001 18:39:45 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f212dlg13993; Wed, 28 Feb 2001 18:39:47 -0800 (PST) Resent-Date: Wed, 28 Feb 2001 18:39:47 -0800 (PST) Message-Id: <5.0.2.1.2.20010228183632.00a88a10@pop.walltech.com> X-Sender: bgreenblatt@pop.walltech.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Wed, 28 Feb 2001 18:37:25 -0800 To: "Ramsay, Ron" , Leif Johansson , "Kurt D. Zeilenga" From: Bruce Greenblatt Subject: RE: CLDAP comments Cc: ietf-ldapext@netscape.com In-Reply-To: <6B33416BC4BBD411BCA6009027D0D18C014E2370@aspams01.ca.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Resent-Message-ID: <"_k52K.A.PaD.xZbn6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com At 11:57 AM 3/1/2001 +1100, Ramsay, Ron wrote: >Hi, > >Regarding combining results into a single PDU, I note that this would be >imcompatible with the LDAP ASN.1 definitions. Isn't this exactly the point that Leif was making, and why it is a good idea to update CLDAP? ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html From list@netscape.com Wed Feb 28 22:10:04 2001 Received: from netscape.com (c3po.netscape.com [205.217.237.46]) by ietf.org (8.9.1a/8.9.1a) with SMTP id WAA07947 for ; Wed, 28 Feb 2001 22:10:03 -0500 (EST) Received: from aka.mcom.com (aka.mcom.com [205.217.237.180]) by netscape.com (8.10.0/8.10.0) with ESMTP id f21387M03318; Wed, 28 Feb 2001 19:08:07 -0800 (PST) Received: (from list@localhost) by aka.mcom.com (8.10.0/8.10.0) id f21389w24148; Wed, 28 Feb 2001 19:08:09 -0800 (PST) Resent-Date: Wed, 28 Feb 2001 19:08:09 -0800 (PST) Message-ID: <6B33416BC4BBD411BCA6009027D0D18C014F6A33@aspams01.ca.com> From: "Ramsay, Ron" To: Bruce Greenblatt , Leif Johansson , "Kurt D. Zeilenga" Cc: ietf-ldapext@netscape.com Subject: RE: CLDAP comments Date: Thu, 1 Mar 2001 14:07:40 +1100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: text/plain; charset="iso-8859-1" Resent-Message-ID: <"g1b5KD.A.84F.Y0bn6"@glacier> Resent-From: ietf-ldapext@netscape.com X-Mailing-List: X-Loop: ietf-ldapext@netscape.com Precedence: list Resent-Sender: ietf-ldapext-request@netscape.com Bruce, Leif said he thought his remarks had applicability to LDAP. I was trying to qualify this. Or have I been assuming that LDAP runs over TCP/IP and missed some subtle point about LDAP over UDP? I couldn't see the relevance to LDAP and said so. Sorry if I wasn't clear. Ron. -----Original Message----- From: Bruce Greenblatt [mailto:bgreenblatt@directory-applications.com] Sent: Thursday, 1 March 2001 13:37 To: Ramsay, Ron; Leif Johansson; Kurt D. Zeilenga Cc: ietf-ldapext@netscape.com Subject: RE: CLDAP comments At 11:57 AM 3/1/2001 +1100, Ramsay, Ron wrote: >Hi, > >Regarding combining results into a single PDU, I note that this would be >imcompatible with the LDAP ASN.1 definitions. Isn't this exactly the point that Leif was making, and why it is a good idea to update CLDAP? ============================================== Bruce Greenblatt, Ph. D. Directory Tools and Application Services, Inc. http://www.directory-applications.com See my new Book on Internet Directories: http://www.phptr.com/ptrbooks/ptr_0139744525.html