[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Force client to use TLS

To: Atom Powers <apowers@digipen.edu>
Subject: Re: Force client to use TLS
From: Thierry Lacoste <lacoste@univ-paris12.fr>
Date: Sat, 1 Jul 2006 16:10:56 +0200
Cc: Buchan Milne <bgmilne@staff.telkomsa.net>, aubert@iut-bm.univ-fcomte.fr, openldap-software@OpenLDAP.org
Content-disposition: inline
In-reply-to: <44A3F0DF.7030602@digipen.edu>
Organization: MIAGE
References: <20060628220800.nbkvgnvpvipcs0w4@webmail2.iut-bm.univ-fcomte.fr> <200606291520.40692.bgmilne@staff.telkomsa.net> <44A3F0DF.7030602@digipen.edu>
User-agent: KMail/1.8.2

On Thursday 29 June 2006 17:25, Atom Powers wrote:
> Buchan Milne wrote:
> > On Wednesday 28 June 2006 22:08, aubert@iut-bm.univ-fcomte.fr wrote:
> >> Hello.
> >>
> >> I would like to know if it is possible with OpenLDAP to force user to
> >> use TLS ? I know that I can create a certificate for each user and
> >> configure OpenLDAP to perform checks on client certificates for an
> >> incoming TLS session. First, it obliges to generate a certificate for
> >> each user, what I do not want to do. Second, it is only if a TLS
> >> session is initiated. What happened if the client does not start a TLS
> >> session ?
> >
> > How about just:
> >
> > security ssf=128
>
> Or: security tls=1
What if I want to force TLS except on the loopback interface?

Regards,
Thierry.

Follow-Ups:
- Re: Force client to use TLS
  - From: Aaron Richton <richton@nbcs.rutgers.edu>

Next by Date: Re: Replica Problem ... permission ?
Index(es):
- Chronological
- Thread