Re: [Fwd] Re: query on ldap->bind & ldap->compare

[Mark W. <mew...@un...>]

On Thu, 4 May 2000, Chris Ridd wrote:
> 
> > was just tinking of requiring one of sasl anon (none anonymous whatever) or
> > simple to be passed. This gives compatability with the current syntax and
> > gives checking too. Also a password of '' should probably not be allowed
> > with simple.
> 
> I think we're saying the same thing.
> 
> Examples:
> 
> 	bind(method => 'none')
> 	bind(method => 'simple',
>              dn => 'blah', password => 'blah')
> 	bind(method => 'nameonly',
> 	     dn => 'blah')
> 	bind(method => 'sasl',
> 	     dn => 'blah', ... more stuff for SASL ... )
+1 from me.
> 
> Bind can look at method and do whatever checking it wants on the other 
> parameters, like checking for empty passwords in certain cases.
> 
> > > The current default of 'none' should be kept.
> > 
> > You mean anonymous bind if no method is given ? That would leave
> > use where we are now if someone misspells method. I would rather
> > requier a method parameter.
> 
> Oh yeah :-) Sorry I must have been thinking about something else...
> 
By not allowing us to use blank passwords (except for none) I think this
will eliminate one more critical LDAP programming mistake (wish other APIs
would follow this path).

Mark
> > Graham.
> 
> Chris
> 
> 
>