I have one comment, and please pardon this nitpicky point.
In Section 6, "Security Considerations," the following phrase appears:
"Implementors and administrators should be aware that allowing sorting
of results could enable the retrieval of a large number of records from
a given directory service, irregardless of administrative limits set on
the maximum number of records to return."
Correct me if I am wrong, but I do not believe "irregardless" is a word. I
know
it's a small matter, but we might as well correct it while we have the
chance.
I suggest using the word "regardless" to avoid this double negative
non-word.
Scott