draft-ietf-ldapext-authmeth-00

[John Haxby <jch@pwd.hp.com>]

Chris Newman wrote:

>   The content of the credentials field is defined by RFC 2195
>   (CRAM-MD5) and contains the "user name" to login as, followed by a
>   space, followed by the hex encoding of the challenge.
>
>   I assume the LDAP equivalent to "user name" is a DN, so that has to
>   be included there.  If LDAP DNs can include a space, then CRAM-MD5
>   isn't suitable for use with LDAP and you'll have to recommend a
>   different mechanism.

Not quite.  Any user name, a space and a sequence of hex digits can be
unambiguously interpreted since the hex digits do not contain any space
characters.

This is fortunate, since IMAP user names can also contain spaces :-)

--
John Haxby
OpenMail R&D