[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: no SASL mechanisms?

At 06:01 PM 3/12/01 +0100, =?iso-8859-2?Q?=22Michalski=2C_Rafa=B3=22?= wrote:
>Also, is PLAIN mechanism usage 
>(by ldap API / command line tools)
>secured by any means
>to avoid sending clear text passwords?

Yes.  The default security parameters disable SASL
mechanisms using plain passwords when there are
inadequate confidentiality protections in place.

See SASL options in slapd.conf(8).