RE: draft minutes from Chicago meeting

[Paul Leach <paulle@microsoft.com>]

> -----Original Message-----
> From: Erik Skovgaard [mailto:eskovgaard@geotrain.com]
> Sent: Friday, October 02, 1998 8:42 AM
> To: Phil Pinkerton; ietf-ldapext@netscape.com
> Subject: Re: draft minutes from Chicago meeting
> 
> 
> Phil,
> 
> Think about it, how will you implement a multi-server domain?
> 
> With CRAM-MD5 you have to configure the password for users on 
> each server.
> That may be fine for a few servers and a few non-anonymous 
> users, but it
> does not scale when you implement hundreds of servers and 
> have millions of
> users that require strong authentication.
> 
> Hence, if you *only* mandate CRAM-MD5, you will only cater to 
> the small
> installations.  That was the reason for my question.

That's one of the reasons why Digest is better. The protocol is specifically
designed to allow a third party authentication service so that passwords
don't have to be configured on each server.

Paul