Things we might want to do                              -*- outline -*-

* Map LDAP error codes

* Optimize lookup
** Use the most likely server first.
   This is the server where a baseDN has been given and that baseDN is
   contained in the search pattern.

* Properly use locks in crlcache.c

* name subordination (nameRelativeToCRLIssuer) 
   is not yet supported by Dirmngr.

* CRL DP URI
  The CRL DP shall use an URI for LDAP without a host name.  The host
  name shall be looked by using the DN in the URI.  We don't implement
  this yet.  Solution is to have a mapping DN->host in our ldapservers
  configuration file.


