Registry&Directory InfrastructureOverall Problem Statement
LDAP, and to a lesser degree X.500, are simply protocols.
Though possessing rich informational and functional models, they don’t provide any capabilities on their own for, for example, expressing business rules..
- ensuring any particular identifier is unique
- [I’m using “identifier” here in terms of an arbitrary attribute value, not as a RDN value]
- ensuring syntax of string-based attribute values
- This is more an issue with LDAP, X.500 has provisions for server-based attribute syntax validation.
- etc.