--On Thursday, March 16, 2006 4:54 PM -0600 Dustin Puryear <[EMAIL PROTECTED]> wrote:
I would disagree. A lot of apps bind against a user's entry as a form of authentication for the user. The app then does a member: lookup against a group for authorization. Do you not find this to be the case?
No, not at all... All of our apps bind as their own identity, and then do a lookup on the users privileges to see what they are authorized to do. We don't allow authentication to the directory server (that's why we have a Kerberos KDC).
--Quanah -- Quanah Gibson-Mount Principal Software Developer ITS/Shared Application Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html --- You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.
