Re: db encryption/checksum (was: commit: ldap/doc/man/man5 slapd-bdb.5)

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

I wrote:
> - Protecting data on the machine itself, if it gets stolen or carelessly
>   sold.  I don't know much about how that works though, in particular
>   if one wants slapd to come up at reboot.  Store the key physically
>   in a different place, on a remote filesystem?

Sorry, I should have read the thread you referred to first.  But still,
I don't understand why it needs to be such a problem.  It would need
proper care, yes.  The remote filesystem would have access controls for
the machine's IP address and network, I presume.  Or if not a
filesystem, the server could fetch the keys with ldaps: or https: from a
server with similar access controls:-)

-- 
Regards,
Hallvard