big picture

[Ken Peirce <kpeirce@earthlink.net>]

I'll apologize for bringing this up if it's a settled issue, but I didnt'
see this issue discussed in the archives:

How does LDAP fit into the policy picture with COPS and the AAA WG work? I
understand that COPS is supposed to transport request and decision objects
between a policy server and a router(enforcer). Policy is frequently a
per-user centric item.

Most ISPs I've spoken to want to put policy details for a specific user in a
schema of some sort. However, it would seem that LDAP could transport the
policy enforcement information to the enforcer itself. Do we have to have an
LDAP policy server that is queried by a COPS policy server that is queried
by an enforcer?

If a document exists that explains the larger picture here I would be
grateful for a pointer.

Ken