RE: How to test slapd with TSL/SSL?

["Howard Chu" <hyc@highlandsun.com>]

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Jim Hud

> I am (also) confused about sasl, when TLS is in use then is sasl also
used?
> The information about this subject is very thin so I plan to summarise how
> to use it when I eventually find out.

SASL and TLS are completely independent. Either can be used with or without
the other. In the case of the SASL-EXTERNAL mechanism, it is expected that
TLS/SSL
is already in use and that the client provided a valid client certificate.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc