Re: Refusing connections when START_TLS is not sent

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 08:26 AM 12/10/2003, Pierre Moermans wrote:
>Dear list,
>
>As far as I understand, clients using the START_TLS instruction must do
>so on the standard (PLAIN text) port, usually, the port 389.
>I've done that, and it worked fine.
>
>Now, I would like to refuse PLAIN text communication when the START_TLS
>command is not sent by the client. I've been googling for a while with
>no success.
>Does anybody know how to do that ?

See the 'security' directive in slapd.conf(5), as
well as section 9.2 of the Admin Guide.

Kurt