Subject: Id without Password

From: Kathy Dally <[email-masked]>
Date: Wed, 24 Apr 2002 17:29:55 -0400

Hi All!

Here's the X.501 statement about the authorization level when a password
is not provided with the identity being checked:

	X.501 1993, 16.4.2.3:

	'For access control purposes, the "simple" authentication level
requires a 	   	 password; THE CASE OF IDENTIFICATION ONLY, WITH NO
PASSWORD SUPPLIED, IS 		 CONSIDERED "NONE".'  [KLD supplied emphasis.]

This helps with the 'no password' case.  However, I did not notice
anything about the 'password in the clear' case.

Regards,
Kathy Dally