Re: [Protocol] clarification on StartTLS resonse (WAS: authmeth-15notes)

"Roger Harrison" <[email protected]> Thu, 20 Oct 2005 08:15:32 -0600
Newsgroups gmane.ietf.ldapbis
Message-ID <[email protected]>
I agree with Hallvard on this one. Jim, can you add the sentence, In
this case the LDAP session is left without a TLS layer, at the end of
section 4.14.2? 

Thanks, 

Roger

>>> Hallvard B Furuseth <[email protected]> 10/19/05 11:12 pm >>>
Since Roger said protocol-like issues were moved back to [Protocol], I
suggest the last sentence in Authmeth-16 3.1.2 is moved to [Protocol]
too:

   Authmeth-16 3.1.2. StartTLS Response

   The server will return a resultCode other than success (as
   documented in [Protocol] section 4.14.2) if it is unwilling or
   unable to negotiate TLS.  In this case the LDAP session is left
   without a TLS layer.

Then Authmeth does not need to mention non-success StartTLS at all, it
can just say that the rest of the section is about TLS issues after a
success response.

--
Hallvard