[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SSL certificates, kerberos keytabs, and load balancing

To: Quanah Gibson-Mount <quanah@stanford.edu>
Subject: Re: SSL certificates, kerberos keytabs, and load balancing
From: Michael Ströder <michael@stroeder.com>
Date: Tue, 13 Apr 2004 18:54:11 +0200
Cc: openldap-software@OpenLDAP.org
In-reply-to: <1182295230.1081847486@cadabra.stanford.edu>
References: <OF7CA6E304.6DFA8A9B-ONC1256E71.004815B2-C1256E71.0049D385@t-mob ile.at> <3641626.1081789097@cadabra-dsl.stanford.edu> <m3fzb8e6jb.fsf@marin.l4b.de> <56259807.1081841713@cadabra-dsl.stanford.edu> <407C0B1A.9030201@stroeder.com> <1182295230.1081847486@cadabra.stanford.edu>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040113

Quanah Gibson-Mount wrote:

For various reasons, I cannot use self-signed certs on our production servers, or I'd just go that route.

How about running your own CA for issuing SSL certs for the LDAP servers? A couple of shell scripts will do most times. Note: Usually you don't need the CA certs being present in every web browser.

Or maybe you're using the term "self-signed certs" equal to "own SSL CA"?

Ciao, Michael.

References:
- Re: SSL certificates, kerberos keytabs, and load balancing
  - From: Quanah Gibson-Mount <quanah@stanford.edu>
- Re: SSL certificates, kerberos keytabs, and load balancing
  - From: Dieter Kluenter <dieter@dkluenter.de>
- Re: SSL certificates, kerberos keytabs, and load balancing
  - From: Quanah Gibson-Mount <quanah@stanford.edu>
- Re: SSL certificates, kerberos keytabs, and load balancing
  - From: Michael Ströder <michael@stroeder.com>
- Re: SSL certificates, kerberos keytabs, and load balancing
  - From: Quanah Gibson-Mount <quanah@stanford.edu>

Prev by Date: Re: Access list - limiting access to attribute
Next by Date: Re: Access list - limiting access to attribute
Index(es):
- Chronological
- Thread