[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
updating as anonymous
I think this belongs in [Protocol], not in [authmeth]:
6. Anonymous Authentication
Servers SHOULD NOT allow
clients with anonymous authentication to modify directory entries or
access sensitive information in directory entries.
This is about the update operations, not about the bind operation.
I guess the same applies to this:
10. Security Considerations
Servers are encouraged to prevent modifications by anonymous users.
though I don't think that's important.
--
Hallvard