{
  "context": "Evaluates whether the solution relies on ldap3's vendor-specific extensions for Microsoft Active Directory and Novell eDirectory rather than generic LDAP operations. Checks focus on correct extension selection, parameter usage, and handling of tokens/results to deliver the behaviors described in the spec.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "DirSync calls",
      "description": "fetch_ad_changes uses Connection.extend.microsoft.dir_sync (or equivalent bound on a Connection) with the provided base DN, filter, selected attributes, and passes through any incoming cookie to obtain a refreshed cookie from the server.",
      "max_score": 30
    },
    {
      "name": "DirSync tokens",
      "description": "Continuation tokens from dir_sync are handled as bytes, returned in the result mapping, and new requests honor parent-first ordering and optional object security flags by setting ancestors_first/object_security according to the API inputs.",
      "max_score": 15
    },
    {
      "name": "AD password extension",
      "description": "rotate_ad_password invokes the Active Directory-specific password change extension (Connection.extend.microsoft.modify_password) rather than generic modify operations, and supplies the old password parameter when performing self-service changes.",
      "max_score": 20
    },
    {
      "name": "eDirectory universal password",
      "description": "Universal password management relies on eDirectory extensions by calling Connection.extend.novell.set_universal_password for writes and uses Connection.extend.novell.get_universal_password for verification when supported, not attribute modification.",
      "max_score": 20
    },
    {
      "name": "eDirectory bulk membership",
      "description": "Group membership updates are executed via Connection.extend.novell.add_members_to_groups (and optional start/end_transaction) with fix/transaction flags to repair backlinks, returning per-group add/skip details.",
      "max_score": 15
    }
  ]
}