6 May
2016
6 May
'16
5:15 a.m.
Arran Cudbard-Bell wrote:
My main reason for being less than enthusiastic about using CN for NAIs, is because in LDAP (also X509) CN is usually the user's humanly readable name, so you're creating discordant representations of the user.
That doesn't matter today anymore. In a modern setup you would attach the whole subject DN to the user's LDAP entry or define another attribute mapping. Ciao, Michael.