Re: LDAP Access Control

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

Ed Reed writes:
> David - a note on disallowing traversal of namespaces....
> 
> We see this fairly often in customer requirements for enterprise directories.

Another case example:

When the University of Oslo started an X.500 server with data about our
employees in 1989/90, the Data Inspectorate (the Norwegian privacy
protection watchdog) required that it should not be possible to dump
parts of the Directory.  They waived this requirement when we explained
that it would be hard to prevent repeated search/read operations.  They
recommended instead that we logged who used the directory, in order to
check for abuse.  Later on, things like WWW->X.500/LDAP gateways, WWW
address lists, search robots & so on made that too rather pointless.
Still, runaway technology is hardly an argument against battling runaway
technology.

-- 
Hallvard