[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ldap password policy approach



At 08:21 PM 10/27/99 -0600, Jim Sermersheim wrote:
>If we open the discussion up to LDAP applications in general rather than talk specifically about authentication applications, I don't think an administrator can realistically enforce well behaved applications. Since LDAP is an open protocol, and surely there is/will be a wide array of applications that are LDAP enabled, how can an administrator prevent a 'naughty' LDAP application from being run at my desktop?


This is the same problem as a 'naughy' whatever application.
Administrators should deal in the same manner as if the user
had used in any other unauthorized software.

3rd party authentication services are, if authorized, are
generally choosen (and policed) by the administrator.

Kurt

----
Kurt D. Zeilenga		<kurt@boolean.net>
Net Boolean Incorporated	<http://www.boolean.net/>