I'm sure others will point you to any recent documents issued on this (LDUP, Stephens's x.500 acl usage etc.). The Open group also appears to be dabbling in this area....
However to give you some perspective as a directory vendor...we feel that the opportunity has been missed for standard LDAP acl and that the level of inter-vendor integration/synchronization implied by a standard acl model (and repl model) will more realistically be achived by meta directory/directory proxy type solutions.
You will find discussions on this on this list's archive (eg. subject: moving access control discussion to LDUP) or on the LDUP archive.
Rob.
Shari Galitzer wrote:
Hi,
I'm trying to find some information on current efforts to specify standards for access control for LDAP directories. I see access control is an area being worked on but cannot find any information. Can you point me to some information?
Thanks a lot,
Shari Galitzer
Principal Security Engineer
Phone: 608-251-6414
Fax: 608-663-6332Entrust/CygnaCom