Re: Authentication Methods for LDAP - last call

[Steve Kille <S.Kille@isode.com>]

Mark,

I agree with all of this.   CRAM-MD5 is a good shared 
secret mechanism, better than plain text password, and 
suitable for some LDAP deployment.

I think that X.509 (assymetric key) mechanisms, such as 
the one you describe are going to be suitable for a lot of 
other environments. 

My objection is to making CRAM-MD5 MANDATORY, when it is 
so clearly unsuitable for a lot of types of LDAP deployment.


Steve