Evaluation: draft-legg-ldapext-component-matching

[Russ Housley <housley@vigilsec.com>]

                    Yes    No-Objection  Discuss *  Abstain

  Russ Housley        [   ]     [   ]       [ X ]      [   ]

  Section 9 includes:

    "... because the
    component matching rules are applicable to any attribute syntax,
    support for them in a directory server may allow searching of
    attributes that were previously unsearchable by virtue of there not
    being a suitable matching rule.  Such attribute types ought to be
    properly protected with appropriate access controls."

  Access controls cannot be implemented without authentication.  How is 
authentication achieved?  Is there a reference?

  Is there a standard mechanism for access control lists?  If so reference 
it.  If not, does this cause interoperability issues?