Re: invalid Credentials v/s Inappropriate authentication

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 03:24 AM 6/19/00 -0600, Vithalprasad Gaitonde wrote:
>Hi,
>	My query pertains to the resultcode being returned by ldap server during user authentication.
>In which cases should the ldap server return invalid credentials and when does it return Inappropriate authentication. 

It should return invalid credentials when the provided credentials are unverifiable.

>For e.g If I create a user thru ldif w/o a password attribute, the password attribute of this user will be NULL. Now when I try to login as this user with a nonNULL password, should the server return invalid credentails or Inappropriate authentication. 

InvalidCredentials.

>Where do we draw the line between these two result codes.

RFC 2251, 4.2.2:
   - inappropriateAuthentication: the server requires the client
     which had attempted to bind anonymously or without supplying
     credentials to provide some form of credentials,

That is, inappropriateAuthentication should be returned with server requires
the client to provide credentials and doesn't, invalid credentials should
be returned when the provided credentials are invalid.

Kurt