RE: Issues with current authmeth draft.

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 10:09 PM 5/11/2003, Ramsay, Ron wrote:
>I find this a bit hard to deal with. We are authenticating to a directory, aren't we? I remember quite an extensive discussion once about how the user name in the simple bind alternative related to a user entry. At that time it was pointed out the X.500 requires it to be the 'distinguished' name of an entry. This actually precludes there being no entry and also precludes the name being an alias.

I note that your points are made with respect to simple method
while my points were made with respect to the SASL method.

>Has LDAP jettisoned the X.500 model?

I would say no.  LDAP supports, in addition to X.500-based
mechanisms, many mechanisms which are not specific to X.500
nor LDAP, such as DIGEST-MD5.

Kurt