Re: [ogpx] Protocol for permitting policy decisions

[Carlo Wood <[e-mail]>]

It still matters whether or not it's possible to query the AD about
things the RD might want to deny someone access over or not (IP, email address,
age).

If that is not possible, than in PRACTISE I forsee that there will be
much less cooperation, and thus interop, between AD's and RD's of different
administrations.

For example, in order to be able to ban people by email address, each
RD might choose to run their own AD and not accept third party AD's.

Sending an email, requesting a ban by email address, won't work, of cours :/
Too slow, no response... certainly not if the RD is small and considered
insignificant and the AD has a monopoly and serves large grids.

Therefore I think the protocol must support real-time a few important
datas about users, so that the RD can make a decision, quickly and without
human intervention from the AD.

On Tue, Oct 06, 2009 at 10:05:44PM +0200, Vaughn Deluca wrote:
>  Maybe this will help also: Anything we have said so far on policy in this
> discussion relates to protocol *options*  someone *might* use. None of this
> will be REQUIRED. The protocol will function without using any of it.  So
> really, as far as i can see we *can* move on.
> 
> --Vaughn
> 

-- 
Carlo Wood <[e-mail]>