Re: Comments from Christian H. on LDAP

[Russ Wright <[e-mail]>]

> 2- There should be a provision to use the common authentication 
> technology. In particular, one should be able to include a 
> challenge/response mechanism and the use of PEM certificates.

> 3- Do we really need to carry the X.500 update operations over 
> the network? We could probably do without!

If you mean "should LDAP include a modify operation", my answer is yes.  
If you have a good authentication infrastructure, you can allow everyone 
at a site to update their own information.  Since not everyone will have a 
machine capable of doing DAP, we need some lightweight protocol that 
supports modifies.

The problem is what type of authentication should it use.  The U of 
Michigan folks are using Kerberos, others may want to see a solution to #2 
above.

Russ