CWA 13995:2000

X.500 Profile ADY21 - DSA support of Directory Access Protocol CWA 13995:2000

Scope

ISO/IEC ISP 15125-3 (ADY 21) profiles the primary DSA conformance requirements for Directory Access. It addresses distributed and non-distributed environments, with unsigned operations, and security levels of none, simple without password, and simple with password.
This part of ISO/IEC ISP 15125 only addresses DSA Directory Access in a distributed or non-distributed environment. If DSA Directory Access in a distributed environment is required, the DSA shall conform to ISO/IEC ISP 15125-4 (ADY 22), DSA support of Distributed Operations, in addition to this part of the ISP. The security requirements in this part of the ISP apply only for the cases where the security levels is none, simple without password, or simple with unprotected password. If simple authentication with protected password or strong
authentication is required, the DSA shall conform to ISO/IEC ISP 15125-6 (ADY 42), DSA Authentication as DAP Responder, in addition to this part of the ISP. This part of the ISP only addresses DSA performing unsigned operations. If digitally signed operations are required,
the DSA shall conform to ISO/IEC ISP 15125-6 (ADY 42), DSA Authentication as DAP Responder, in addition to this part of the ISP.
1.1 General ISO/IEC ISP 15125-3 covers the use of the Directory Access Protocol, as defined in 1993 ITU-T X.500 Series of
Recommendations and ISO/IEC 9594:1995, by a DSA which receives a request from a DUA and responds with a result or an error.
The objective of this part is to define capabilities and constraints in support for DAP by DSAs so that DUAs will be able to interwork with the Directory. 1.2 Position within the taxonomy This document, part 3 of ISO/IEC ISP 15125 is one part of a multi-part ISP identified in ISO/IEC TR 10000-2 as "ADY21, DSA Support of Directory Access"...(Truncated)