IETF Logo Mail Archive

Re: [ldapext] DBIS - new IETF drafts

Clément OUDOT <clem.oudot@gmail.com> Thu, 09 January 2014 16:26 UTC

Return-Path: <clem.oudot@gmail.com>
X-Original-To: ldapext@ietfa.amsl.com
Delivered-To: ldapext@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73A571AE454 for <ldapext@ietfa.amsl.com>; Thu, 9 Jan 2014 08:26:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.081
X-Spam-Level:
X-Spam-Status: No, score=-0.081 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WrIicvEKJ-Ld for <ldapext@ietfa.amsl.com>; Thu, 9 Jan 2014 08:26:42 -0800 (PST)
Received: from mail-la0-x22d.google.com (mail-la0-x22d.google.com [IPv6:2a00:1450:4010:c03::22d]) by ietfa.amsl.com (Postfix) with ESMTP id F15A11AE456 for <ldapext@ietf.org>; Thu, 9 Jan 2014 08:26:41 -0800 (PST)
Received: by mail-la0-f45.google.com with SMTP id b8so617151lan.32 for <ldapext@ietf.org>; Thu, 09 Jan 2014 08:26:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=yo1nJHW7a0YUTgNlg2UGetFrQAkrN7w4btRPC3BkBV4=; b=b8VpZUuANmpNXbsOHXacC+73jnU2sw1utPB1zy1KImyuhc6aZUMZqsN3oJwmGJY0rw zGJQKDmef7o6uh+JZkTnm7PjX2+oruKbNK88QA5dKGbthZ/Lffb+y8U61DvLhMn2EjiZ QAYiLzkEWEIQGTJ08y4vl6UyhKQZvBuNziyymd4en6pFh0o11Fhkz4ahA3+VN/OvCi7W 63hGyhLNbFQUIM7t5yoaHyL+JC8kdeHGDU01yYxty0HevBCPrMmlHmzDmFn9qDD9cUUE JC5mz7iwKw7H1krrah9LmvVJjuGC53IwUnnL++sHQL3cbzhAYK6+2SKFvjF6Pyx3ZpvY pOSA==
MIME-Version: 1.0
X-Received: by 10.152.28.230 with SMTP id e6mr1654908lah.3.1389284791711; Thu, 09 Jan 2014 08:26:31 -0800 (PST)
Received: by 10.114.0.176 with HTTP; Thu, 9 Jan 2014 08:26:31 -0800 (PST)
In-Reply-To: <52CEC81A.9080207@gmail.com>
References: <52C9BED5.2080900@proseconsulting.co.uk> <52CAEA7D.5030002@highlandsun.com> <52CB194D.3090009@proseconsulting.co.uk> <52CB1DE3.6040000@highlandsun.com> <52CB2194.30907@proseconsulting.co.uk> <52CB26C6.1070406@highlandsun.com> <52CDB3FC.2000205@proseconsulting.co.uk> <52CEB72F.9050000@stroeder.com> <52CEC81A.9080207@gmail.com>
Date: Thu, 09 Jan 2014 17:26:31 +0100
Message-ID: <CAK_oV490nGRdKaRHn-k0=yYez2zWYJNp79WDXrqLwpwAxnz-eQ@mail.gmail.com>
From: Clément OUDOT <clem.oudot@gmail.com>
To: Ludovic Poitou <ludovic.poitou@gmail.com>
Content-Type: multipart/related; boundary="089e0160b79a8093be04ef8c1258"
Cc: ldapext@ietf.org, Michael Ströder <michael@stroeder.com>
Subject: Re: [ldapext] DBIS - new IETF drafts
X-BeenThere: ldapext@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: LDAP Extension Working Group <ldapext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ldapext>, <mailto:ldapext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ldapext/>
List-Post: <mailto:ldapext@ietf.org>
List-Help: <mailto:ldapext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ldapext>, <mailto:ldapext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Jan 2014 16:26:43 -0000

2014/1/9 Ludovic Poitou <ludovic.poitou@gmail.com>

>
>
>   Michael Ströder <michael@stroeder.com>
>  January 9, 2014 at 15:50
>
> Mark R Bannister wrote:
>
> I don't personally like the idea
> of having per-user shadow attributes, however some might see it as a feature
> and there may be some edge cases where this is exactly what is required.
>
> AFAICS today nobody is seriously using LDAP with shadow attributes anymore.
>
>
> draft-behera-ldap-password-policy-10 is already widely deployed, you say?
> Then it must go higher up in my reading list.
>
> Yes, it's the only standard considered widely deployed. You have to know it.
>
>
> Actually, I'm not sure version 10 is the version that is widely
> implemented. Version 9 is the one that was implemented in Sun DS, OpenDS,
> OpenDJ, Oracle servers...
>


And OpenLDAP. Seems RedHat (389) use it too, as it was implemented in the
SUN DS code base used for this server.

I think nobody implements version 10 yet.

Clément.

v2.23.0 | Report a Bug | By Email