[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: documentation for security ssf-settings



Me too.. I had some problems recently trying to secure a connection, do
not know why but I had to set all of them to 256, lower number gave
errors of "..stronger something needed.." taking a look at the logs I
saw that most to the connection were "established ssf=256", so, I tried
that number and worked out, but hate guessing, and less when security is
involved, the man page is clear, but how can I know if I need 65, 112,
128 or whatever?

For what I read about which ssf to use for a specific connection , you
have to to use ACL's, I found some examples in the documentation.


Bytes..

During Wed, 11 Apr 2007, Matthias Nagl Spat Out:

> Date: Wed, 11 Apr 2007 10:57:16 +0200
> From: Matthias Nagl <openldap-list@mnagl.de>
> To: openldap-software@openldap.org
> Subject: documentation for security ssf-settings
> 
> 
> Is there any more comprehensive documentation for the security strength 
> factors in the security statement than the man-page entry?
> 
> "The minssf=<factor> property specifies the minimum acceptable security 
> strength factor as an integer approximate to effective key length used for 
> encryption.   0  (zero) implies no protection, 1 implies integrity protection 
> only, 56 allows DES or other weak ciphers, 112 allows triple DES and other 
> strong ciphers, 128 allows RC4, Blowfish and other modern strong ciphers.  
> The default is 0."
> 
> I am espacially interested which consequences the different ssf-settings 
> exactly have. What is really checked if I set for example
> security transport=x sasl=y tls=z ??
> 
> Additionally I'd like to know if it is possible to set special 
> security-settings for localhost-connections as they are always secure and 
> won't need encryption.
> 
> Thanks
> 
> Matthias
> 

-- 
*-=> LCP - SAIR Linux Certified Professional               <=-*
*-=> Powered By FreeBSD 6.2-STABLE - The Power To Serve    <=-*
*-=> GPG Public Key at http://gnv.us.ks.cryptnet.net       <=-*


*-=> 	    Telematica S.R.L  Telecomunicaciones	   <=-*
*-=> Tel./Fax: (598)2 408 2837 - 4024596 E. Acevedo 1622   <=-*

---
This message was checked by forty monkeys and found to not
contain any SPAM whatsoever.
		-- Your monkeys may vary