Re: Having an issue with SSF

["Dieter Kluenter" <dieter@dkluenter.de>]

Pat Riehecky <prieheck@iwu.edu> writes:

> I am trying to take advantage of the localSSF option in OpenLDAP 2.4.
> This system will only allow one user to login and I like to leave a door
> for me to get back in if I forget the admin password.
>
> My goal is to get the local socket running with no security and require
> anyone using a TCP connection to use TLS with at least a 3DES cypher.  I
> would prefer updates happen over a higher grade encyption, but eh....
>
> In doing so I have put the following in my slapd.conf
>
> .....
>
> localSSF 0


default localssf is 71.
[...]

-Dieter

-- 
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6