Mark, That would be a problem. A lot of us still use the userPassword for authentication. It must be possible to protect the password (including performing filter matching) yet be able to use the compare operation on the attribute. Cheers, ....Erik. Erik Skovgaard Siemens Meta-Directory Solutions Phone: +1 604-204-0750 Fax: +1 604-204-0760 -----Original Message----- From: Mark Davidson [mailto:markd@pwd.hp.com] Sent: Monday, July 09, 2001 02:02 To: Skovgaard, Erik Cc: ietf-ldapext@netscape.com Subject: Re: ACM permission > Would your example prevent me from using the Compare operation? > Yes, as read access would cover all examination of the attribute. so without read attribute you could not get the value, compare the value or use the value in a filter etc. Mark
Attachment:
Skovgaard, Erik.vcf
Description: Binary data