ldap vs kerberos authentication for idpv3

[Paul B. Henson]

> From: Bellina,Brendan
> Sent: Tuesday, February 09, 2016 2:18 PM
> 
> Most directory servers should allow you to define an attribute as case
> sensitive and to restrict matching based on that.

Well, yes, you can define a custom schema with a custom attribute as you wish; but typically username is expected to be in one of the standard attributes in one of the standard schemas for which case sensitivity is already defined.

> unlikely that they would expect user id’s to be case sensitive just as
> email addresses are not.

Most applications I have used treat usernames as case-sensitive. It is rare to run into one which does not, at least in my experience. Unless, I suppose, it is a web application which uses an email address as a user identifier.


--
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768