[ldapext] password policy: pwdAllowUserChange

["Jim Sermersheim" <jimse@novell.com>]

<in reference to draft-behera-ldap-password-policy-xx>

I'm not sure why we need this attribute. It's there to grant a user the
rights to change his own attribute. Are there implementations that need
this? It seems that local access control mechanisms should suffice.

I'd like to remove it unless there's a compelling reason to leave it.

Jim

_______________________________________________
Ldapext mailing list
Ldapext@ietf.org
https://www1.ietf.org/mailman/listinfo/ldapext