Connection-less Lightweight Directory Access Protocol (CLDAP) to Historic Status
Why the connection-less LDAP specification was moved to Historic status.
Zeilenga, K., "Connection-less Lightweight Directory Access Protocol (CLDAP) to Historic Status", RFC 3352, DOI 10.17487/RFC3352, March 2003, <https://www.rfc-editor.org/info/rfc3352>.
@misc{rfc3352,
series = {Request for Comments},
number = 3352,
howpublished = {RFC 3352},
publisher = {RFC Editor},
doi = {10.17487/RFC3352},
url = {https://www.rfc-editor.org/info/rfc3352},
author = {K. Zeilenga},
title = {{Connection-less Lightweight Directory Access Protocol (CLDAP) to Historic Status}},
pagetotal = 4,
year = 2003,
month = mar,
} RFC text
Contents
Network Working Group K. Zeilenga
Request for Comments: 3352 OpenLDAP Foundation
Obsoletes: 1798 March 2003
Category: Informational
Connection-less Lightweight Directory Access Protocol (CLDAP)
to Historic Status
Status of this Memo
This memo provides information for the Internet community. It does
not specify an Internet standard of any kind. Distribution of this
memo is unlimited.
Copyright Notice
Copyright (C) The Internet Society (2003). All Rights Reserved.
Abstract
The Connection-less Lightweight Directory Access Protocol (CLDAP)
technical specification, RFC 1798, was published in 1995 as a
Proposed Standard. This document discusses the reasons why the CLDAP
technical specification has not been furthered on the Standard Track.
This document recommends that RFC 1798 be moved to Historic status.
1. Background
Connection-less Lightweight Directory Access Protocol (CLDAP)
[RFC1798] was published in 1995 as a Proposed Standard. The protocol
was targeted at applications which require lookup of small amounts of
information held in the directory. The protocol avoids the overhead
of establishing (and closing) a connection and the session bind and
unbind operations needed in connection-oriented directory access
protocols. The CLDAP was designed to complement version 2 of the
Lightweight Directory Access Protocol (LDAPv2) [RFC1777], now
Historic [HISTORIC].
In the seven years since its publication, CLDAP has not become widely
deployed on the Internet. There are a number of probable reasons for
this:
- Limited functionality:
+ anonymous only,
+ read only,
+ small result sizes only, and
- Insufficient security capabilities:
+ no integrity protection,
+ no confidentiality protection
- Inadequate internationalization support;
- Insufficient extensibility; and
- Lack of multiple independently developed implementations.
The CLDAP technical specification has normative references to
multiple obsolete technical specifications including X.501(88),
X.511(88), RFC 1487 (the predecessor to RFC 1777, the now Historic
LDAPv2 technical specification). Unless the technical specification
were to be updated, CLDAP cannot remain on the standards track
because of the Normative reference to a Historic RFC.
The community recognized in the mid-1990s that CLDAP needed to be
updated. In response to this, the IETF chartered the LDAP Extensions
Working Group (LDAPext WG) in 1997 to undertake this update. The
LDAPext WG is concluding without producing an update to CLDAP.
Currently, there is no standardization effort to update CLDAP.
It should be noted that the community still has interest in
developing a "connection-less" directory access protocol. However,
based on operational experience, has determined that further
experimentation is necessary to address outstanding technical issues.
In particular, security considerations associated with
"connection-less" services need to be addressed.
2. Recommendation
As there is no viable standardization effort to update CLDAP as
necessary to keep it on the standards track and the community
currently considers this an area requiring further experimentation,
RFC 1798 must be moved to Historic status.
It is recommended that those interested in connection-less access to
X.500-based directory services experiment with [LDAPUDP] and other
alternatives which might become available.
3. Security Considerations
The security of the Internet will not be impacted by the retirement
of CLDAP.
4. Acknowledgment
The author would like to thank the designers of CLDAP for their
contribution to the Internet community.
5. Normative References
[HISTORIC] Zeilenga, K., "Lightweight Directory Access Protocol
version 2 (LDAPv2) to Historic Status", RFC 3494, February
2003.
[CLDAP] Young, A. "Connection-less Lightweight Directory Access
Protocol," RFC 1798, June 1995.
6. Informative References
[LDAPUDP] Johansson, L. and R. Hedberg, "Lightweight Directory
Access Protocol over UDP/IP," Work in Progress.
[RFC1777] Yeong, W., Howes, T. and S. Kille, "Lightweight Directory
Access Protocol", RFC 1777, March 1995.
[RFC3377] Hodges, J. and R. Morgan, "Lightweight Directory Access
Protocol (v3): Technical Specification", RFC 3377,
September 2002.
[X501] The Directory: Models. CCITT Recommendation X.501 ISO/IEC
JTC 1/SC21; International Standard 9594-2, 1988.
[X511] The Directory: Abstract Service Definition. CCITT
Recommendation X.511, ISO/IEC JTC 1/SC21; International
Standard 9594-3, 1988.
7. Author's Address
Kurt D. Zeilenga
OpenLDAP Foundation
EMail: Kurt@OpenLDAP.org
8. Full Copyright Statement
Copyright (C) The Internet Society (2003). All Rights Reserved.
This document and translations of it may be copied and furnished to
others, and derivative works that comment on or otherwise explain it
or assist in its implementation may be prepared, copied, published
and distributed, in whole or in part, without restriction of any
kind, provided that the above copyright notice and this paragraph are
included on all such copies and derivative works. However, this
document itself may not be modified in any way, such as by removing
the copyright notice or references to the Internet Society or other
Internet organizations, except as needed for the purpose of
developing Internet standards in which case the procedures for
copyrights defined in the Internet Standards process must be
followed, or as required to translate it into languages other than
English.
The limited permissions granted above are perpetual and will not be
revoked by the Internet Society or its successors or assigns.
This document and the information contained herein is provided on an
"AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING
TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING
BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION
HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Acknowledgement
Funding for the RFC Editor function is currently provided by the
Internet Society.
ISO Plain Language
On this page
§1What CLDAP Was Designed to Do
Connection-less Lightweight Directory Access Protocol (CLDAP), defined in RFC 1798, was published in 1995 as a Proposed Standard. It targeted applications needing small amounts of directory information.
It avoided setting up and closing a connection and the bind and unbind operations used by connection-oriented directory protocols. It was designed to complement LDAP version 2.
CLDAP offered small directory lookups without first establishing a connection. It was intended to complement LDAP version 2.
§1Reasons It Did Not Advance
Seven years after publication, CLDAP had not become widely deployed on the Internet. The memo lists limited functionality (anonymous and read-only access with small results), no integrity or confidentiality protection, inadequate internationalization, limited extensibility, and a lack of multiple independently developed implementations.
Its normative references included obsolete technical specifications. Without updating the specification, the Historic reference to LDAPv2 meant CLDAP could not remain on the standards track.
The memo lists limited capabilities, missing security protections, and a lack of independent implementations as likely issues. Its references also pointed to specifications that were no longer current.
§2Recommendation and Further Work
The LDAP Extensions Working Group was chartered in 1997 to update CLDAP, but it was concluding without producing an update. No standardization effort remained.
The memo says the community remained interested in connection-less directory access but considered further experimentation necessary, especially to address security. It recommends that RFC 1798 be moved to Historic and suggests experimenting with LDAP over UDP/IP and other alternatives.
Because no update was being produced, the memo recommends retiring RFC 1798 to Historic. It says further experimentation is needed for connection-less directory access, including its security.