Independent Submission M. Stroeder Internet-Draft Independent consultant Intended status: Informational September 26, 2014 Expires: March 30, 2015 Lightweight Directory Access Protocol (LDAP): Auxiliary Object Class 'mailboxRelatedObject' draft-stroeder-mailboxrelatedobject-07 Abstract This document defines the auxiliary object class 'mailboxRelatedObject' that can be used to associate an arbitrary object with an Internet mail address. Furthermore an attribute 'intlMailAddr' is defined for storing fully internationalized Internet mail addresses. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at http://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on March 30, 2015. Copyright Notice Copyright (c) 2014 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of Stroeder Expires March 30, 2015 [Page 1]
Internet-Draft LDAP Mailbox Related Objects September 2014 the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2 2. Attribute Type Definition . . . . . . . . . . . . . . . . . . 3 3. Object Class Definition . . . . . . . . . . . . . . . . . . . 3 4. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 4 5. Security Considerations . . . . . . . . . . . . . . . . . . . 4 6. References . . . . . . . . . . . . . . . . . . . . . . . . . 4 6.1. Normative References . . . . . . . . . . . . . . . . . . 4 6.2. Informative References . . . . . . . . . . . . . . . . . 5 Author's Address . . . . . . . . . . . . . . . . . . . . . . . . 5 1. Introduction The attribute 'mail' [RFC4524] can be used to store Internet mail addresses with internationalized <domain> by using the the A-label form [RFC5890] to produce <sub-domain> components of the <Mailbox> production. But it cannot be used to store addresses with <local- part> containing non-ASCII characters. Therefore this document defines a new attribute type 'intlMailAddr' for fully internationalized Internet mail addresses as defined in [RFC6530]. Often the need arises to associate an Internet mail address (which most times is not personal) with an arbitrary object (a service or system user) so applications can look up where to send mail for this object. Many times the commonly available object class 'inetOrgPerson' [RFC2798] is wrongly used for storing such non- personal Internet mail addresses in attribute 'mail' [RFC4524]. Therefore this document defines the auxiliary object class 'mailboxRelatedObject' that can be used to associate an arbitrary object with an Internet mail address. It allows adding an Internet mail address attribute to any entry and allows to use either one or both of attributes 'mail' and 'intlMailAddr'. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119]. This document is being discussed on the ldapext@ietf.org mailing list. Stroeder Expires March 30, 2015 [Page 2]
Internet-Draft LDAP Mailbox Related Objects September 2014 2. Attribute Type Definition The attribute type 'intlMailAddr' is defined for storing SMTPUTF8 compliant addresses [RFC6530]. ( 1.3.6.1.4.1.5427.1.389.4.18 NAME 'intlMailAddr' DESC 'Internationalized Email Address' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) The DirectoryString (1.3.6.1.4.1.1466.115.121.1.15) syntax and the 'caseIgnoreMatch' and 'caseIgnoreSubstringsMatch' rules are described in [RFC4517]. Note that an application might have used the A-label form [RFC5890] to produce <sub-domain> components of the <Mailbox> production. This leads to different possible string representations of the same internationalized Internet mail address which could be listed as different values entry's 'intlMailAddr' attribute, operational issues may arise. The following issues like described for attribute type 'mail' in [RFC4524] have to be considered also for 'intlMailAddr' defined above: Note that the directory will not ensure that values of this attribute conform to the <Mailbox> production [RFC5321]. It is the application's responsibility to ensure that domains it stores in this attribute are appropriately represented. Additionally, the directory will compare values per the matching rules named in the above attribute type description. As these rules differ from rules that normally apply to <Mailbox> comparisons, operational issues may arise. For example, the assertion (mail=joe@example.com) will match "JOE@example.com" even though the <local-parts> differ. Also, where a user has two <Mailbox>es whose addresses differ only by case of the <local-part>, both cannot be listed as values of the entry's 'intlMailAddr' attribute in the same entry (as they are considered equal by the 'caseIgnoreMatch' rule). 3. Object Class Definition Entries of auxiliary object class 'mailboxRelatedObject' MAY contain the following optional attributes: 'mail' [RFC4524] 'displayName' [RFC2798] 'intlMailAddr' Stroeder Expires March 30, 2015 [Page 3]
Internet-Draft LDAP Mailbox Related Objects September 2014 ( 1.3.6.1.4.1.5427.1.389.6.9 NAME 'mailboxRelatedObject' DESC 'Associated RFC 5321 mailbox for any entry' AUXILIARY MAY ( displayName $ mail $ intlMailAddr ) ) 'mail' and 'intlMailAddr' are listed as optional attributes to allow to use only one of both. If 'mail' and 'intlMailAddr' are both set an application MAY choose one or the other to send mail to the entity represented by the directory entry. Therefore Internet mail addresses in attributes 'mail' and 'intlMailAddr' SHOULD represent the same mailbox if both are set or at least the entity MUST be able to retrieve the mail sent to either one of the addresses. 4. IANA Considerations The OID arc used for the attribute type and object class definition is: iso(1) org(3) dod(6) internet(1) private(4) enter-prise(1) stroeder.com(5427) public(1) ldap(389) 5. Security Considerations The introduction of these object classes does not impact the security of the Internet or a particular LDAP directory service. Security considerations for LDAP in general are discussed in documents comprising the technical specification [RFC4510]. 6. References 6.1. Normative References [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [RFC2798] Smith, M., "Definition of the inetOrgPerson LDAP Object Class", RFC 2798, April 2000. [RFC4510] Zeilenga, K., "Lightweight Directory Access Protocol (LDAP): Technical Specification Road Map", RFC 4510, June 2006. [RFC4517] Legg, S., "Lightweight Directory Access Protocol (LDAP): Syntaxes and Matching Rules", RFC 4517, June 2006. Stroeder Expires March 30, 2015 [Page 4]
Internet-Draft LDAP Mailbox Related Objects September 2014 [RFC4524] Zeilenga, K., "COSINE LDAP/X.500 Schema", RFC 4524, June 2006. 6.2. Informative References [RFC5321] Klensin, J., "Simple Mail Transfer Protocol", RFC 5321, October 2008. [RFC5890] Klensin, J., "Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework", RFC 5890, August 2010. [RFC6530] Klensin, J. and Y. Ko, "Overview and Framework for Internationalized Email", RFC 6530, February 2012. Author's Address Michael Stroeder Independent consultant Klauprechtstr. 11 Karlsruhe 76137 DE Email: michael@stroeder.com URI: http://www.stroeder.com Stroeder Expires March 30, 2015 [Page 5]