Hi List,<br><br>I have been using LDAP for some time. The LDAP server is mainly used to store user information. Today I heard that LDAP can be used to control access to other services. More specific, &quot;<span class="comment-body">The way it works is 
that your (or any other) app calls LDAP with like &quot;I am user A, here is 
my ticket, so what I can do?&quot; and then LDAP responds: &quot;User A has a type
 X and can access B, C and D function, but can not access X, Y and Z 
function&quot;. So your app realizes that &quot;Type X can access today and 
tomorrow, but not day after tomorrow&quot; etc.&quot; I went through OpenLDAP document <a href="http://www.openldap.org/doc/admin24/access-control.html">http://www.openldap.org/doc/admin24/access-control.html</a>. But seems it focuses on how to control the access to LDAP server itself. Could anybody show me how to implement this?<br>
<br>1. Do I need to model the business environment in LDAP? e.g. create a node for each function point.<br>2. What is the programming model? Can I use Java interface to retrieve these permission information?<br>3. Is it OpenLDAP specific function or LDAP common function?</span> <br>
<br><br>Thanks,<br>William<br>