Rule Selection
Issue: How to pick a rule to fire
- Evaluate conditions and use rule priority
- May still have multiple candidate rules
Proposal: use DN lexical ordering to break ties
- Policy may be in multiple LDAP repositories
- DN structure of policy must not change
- Also required by n:DN syntax
If chosen rule is the “wrong” one ...
- Add/modify rule priority to correct this