Re: Authmeth/DIGEST-MD5

[mcs@netscape.com (Mark C Smith)]

RL 'Bob' Morgan wrote:
> ...
> All of this brings up the topic of how, in general, a client is able to
> determine what authorization identity the server is using for it (the
> client) on a particular connection.  Since we necessarily allow the server
> a lot of wiggle room in making this determination, the client may not know
> what it's bound as.  Any opinions on this?

Funny you should mention this.  Myself and a couple of other people are
in the processing of finishing the edits on a new Internet Draft that
defines a control to allow a server to indicate to an LDAP client what
authorization identity the server chose.  This is useful both for TLS
and for some SASL mechanisms (where the client would otherwise have no
way to determine what identity the server settled on).  Expect to see
the draft soon.

-- 
Mark Smith
iPlanet Directory Architect / Sun-Netscape Alliance
My words are my own, not my employer's.   Got LDAP?