Re: Many passwords

[Peter W <peterw@usa.net>]

On Wed, Feb 07, 2001 at 05:23:29PM -0500, Dan Weinreb wrote:

> In general, a person may have many different passwords, for
> authenticating himself or herself to different Internet hosts or
> different applications (database systems on database servers, etc).
> The userPassword attribute of the standard LDAPv3 schemas (RFC 2256)
> is multi-valued, but simply providing a set of passwords isn't good
> enough since it doesn't say which password is for which
> host/application.  The same is true of userCertificate.
> 
> How is this handled?  Is each value of userPassword treated as
> compound entry that specifies both the password and what it's a
> password for (ugh!)?

If all the hosts can talk to the LDAP server, then wouldn't you want to use 
the same password for all of them? Isn't that one of the selling points of 
stuff like NIS/NDS/ActiveDirectory/LDAP? 

Confused,

-Peter