Security Label-Based Authorization in Directory Services

Security Labels provide an important mechanism for controlling access to information in many high security environments, and are also useful in environments with lower security requirements. This paper provides a reasonably detailed description of how security labels and clearances work, both in general and in LDAP/X.500 directory services, while attempting to avoid some of the significant complexity often attributed to the subject.