[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ldapi security level?

To: Hallvard B Furuseth <h.b.furuseth@usit.uio.no>
Subject: Re: ldapi security level?
From: Howard Chu <hyc@symas.com>
Date: Sun, 27 Jun 2004 11:00:56 -0700
Cc: openldap-software@OpenLDAP.org
In-reply-to: <HBF.20040627ijw9@bombur.uio.no>
References: <HBF.20040627ijw9@bombur.uio.no>
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a2) Gecko/20040622

Hallvard B Furuseth wrote:

Isn't ldapi:/// secure?


Yes.

Command:

  # /ldap/usr/bin/ldapmodify -x -H ldapi:/// -D ... -w ... -f ...
  ldap_bind: Confidentiality required (13)
          additional info: confidentiality required


But Simple Binds ( -x ) are not.

You have to use SASL/EXTERNAL.
--
  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support

References:
- ldapi security level?
  - From: Hallvard B Furuseth <h.b.furuseth@usit.uio.no>

Prev by Date: Re: ldapi security level?
Next by Date: Re: upper limit to db size
Index(es):
- Chronological
- Thread