Re: LDAP Access Control

[Ludovic Poitou - Sun Microsystems <Ludovic.Poitou@France.Sun.COM>]

<snip>
> QUESTION 1: Do you believe LDAPEXT should be trying to define 
> requirements, framework, and/or a model for access control in 
> LDAP directories? 
> 

Yes

> QUESTION 2: Do you basically support the access control 
> requirements draft (draft-ietf-ldapext-acl-reqts-00.txt)? 
> 

Yes

> QUESTION 3: Do you basically support the access control model 
> draft (draft-ietf-ldapext-acl-model-00.txt)? 
> 

Not Sure... Need more investigations.

> QUESTION 4: Do you think we should adopt the X.500(1993) 
> basic access control model as the starting point for the LDAP 
> access control model? 
> 

If X.500's model maps to the LDAP ACL requirements, then it should be a
starting point for the LDAP model. Simplicity is a MUST.



> QUESTION 5: Do you think we should specify only a framework 
> for identifying access control models, and not define a 
> single standards-track model for LDAP at this time? 
> 

Both.


Ludovic Poitou.

> Please let us know what you think.  If nobody responds to 
> these questions, we'll assume that you support the direction 
> stated in the charter and worked on in the group so far, 
> which is to define an LDAP access control model, and to 
> support the requirements and proposed model drafts. 
> 
> Tim Howes and Mark Wahl 
>