[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Force client to use TLS

To: Michael Häusler <michael@akatose.de>
Subject: Re: Force client to use TLS
From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
Date: Thu, 28 Sep 2006 13:55:10 -0700
Cc: openldap-software@OpenLDAP.org
In-reply-to: <451C2D72.90904@akatose.de>
References: <20060628220800.nbkvgnvpvipcs0w4@webmail2.iut-bm.univ-fcomte.fr> <200606291520.40692.bgmilne@staff.telkomsa.net> <44A3F0DF.7030602@digipen.edu> <20060630094807.wzlba2clyn8kgskw@webmail2.iut-bm.univ-fcomte.fr> <451C226D.1080203@akatose.de> <7.0.1.0.0.20060928124839.03ab8038@OpenLDAP.org> <451C2D72.90904@akatose.de>

At 01:15 PM 9/28/2006, Michael Häusler wrote:
>I am curious: is there a difference between StartTLS and LDAPS, that makes such an ldap.conf(5) option difficult?

ldap.conf(5) was designed to provide defaults to be used only
when the user requested use of the default.  For instance, the
URI default is only used when the user requests the command
line to use the default (by not providing a -H option).  If
one were to add an option to ldap.conf(5) to provide a StartTLS
default, maybe "StartTLS [no|yes|auto|critical]", there should
to be command line flag that says "use the StartTLS default".

- Kurt

Follow-Ups:
- Re: Force client to use TLS
  - From: Michael Häusler <michael@akatose.de>

References:
- Re: Force client to use TLS
  - From: Michael Häusler <michael@akatose.de>
- Re: Force client to use TLS
  - From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
- Re: Force client to use TLS
  - From: Michael Häusler <michael@akatose.de>

Prev by Date: Re: Force client to use TLS
Next by Date: Re: Force client to use TLS
Index(es):
- Chronological
- Thread