{
  "context": "Assesses how well the solution uses ldap3's extended RFC helpers to report authenticated identity, modify passwords, perform paginated searches, and stream persistent search events. Also checks whether the implementation manages LDAP connections appropriately while executing those operations.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "Identity lookup",
      "description": "Retrieves the bound DN using the ldap3 extended identity operation (e.g., Connection.extend.standard.who_am_i()) on an authenticated connection rather than inferring identity from search results.",
      "max_score": 20
    },
    {
      "name": "Password modify",
      "description": "Changes a user's password via ldap3's extended password modification helper (Connection.extend.standard.modify_password or vendor equivalent) and confirms success by rebinding with the new secret.",
      "max_score": 20
    },
    {
      "name": "Paged search",
      "description": "Uses Connection.extend.standard.paged_search with an explicit paged_size to iterate until the server returns an empty cookie, aggregating entries and requested attributes instead of a single unpaged search.",
      "max_score": 20
    },
    {
      "name": "Persistent search",
      "description": "Implements change streaming with Connection.extend.standard.persistent_search (or AD variant), wiring a callback or loop to consume each change notification during the observation window and stopping cleanly.",
      "max_score": 20
    },
    {
      "name": "Connection handling",
      "description": "Configures Server/Connection with provided options, performs proper bind/unbind or context-managed usage, and reuses or rebinds connections appropriately across extended operations.",
      "max_score": 20
    }
  ]
}