>>>>> "Alan" == Alan Buxey <[log in to unmask]> writes:
Alan> One thing Why the realm in the ID (eg you say
Alan> [log in to unmask] ) ? Why not just asdfghjkl ? Why does
Alan> a realm need to be stored in the CUI? It's only purpose is to
Alan> link a local account to a remote auth. Having a realm
Alan> component removes a slice of anonymity..'ah.. You partner with
Alan> someone from camford.ac.uk ' alan -- Sent from my Android
Alan> device with K-9 Mail. Please excuse my brevity.
If you're using it for ACLs, you need the realm for security.
So one org cannot impersonate anothers' users.
|