[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Root dn Authentication question for OpenLDAP

To: "Christian J. Chuba" <cchuba@staff.mail.com>
Subject: Re: Root dn Authentication question for OpenLDAP
From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
Date: Wed, 06 Sep 2000 08:14:16 -0700
Cc: <openldap-software@OpenLDAP.org>
In-reply-to: <01fc01c0180e$5d865f70$c702090a@nj.iname.net>

It's best to only use the rootdn feature to jump start your
directory.  Once you have initial entries loaded, leave rootdn
unset and rely on ACLs.

At 10:25 AM 9/6/00 -0400, Christian J. Chuba wrote:
>1. Can we restrict binding to the root dn so that it is only allowed from a specific ip address (or DNS name)?

No.

>2. If the answer to number 1 is no then is there any support for black listisng an ip address if it tries to bind to the root dn and it fails 3 times in a row?

No.

References:
- Root dn Authentication question for OpenLDAP
  - From: "Christian J. Chuba" <cchuba@staff.mail.com>

Prev by Date: Root dn Authentication question for OpenLDAP
Next by Date: Re: pam_ldap & Netware 5 ldap Server
Index(es):
- Chronological
- Thread