[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: TLS certs needed for Provider and consumer

To: openldap-technical@openldap.org
Subject: Re: TLS certs needed for Provider and consumer
From: Dieter Kluenter <dieter@dkluenter.de>
Date: Wed, 2 Jun 2010 08:13:54 +0200
In-reply-to: <A6059E438B6F484CB0984A797D3FE1E208D36B43@ES-MSG-001.es.govt.state.ma.us>
Organization: AVCI
References: <A6059E438B6F484CB0984A797D3FE1E208D36B43@ES-MSG-001.es.govt.state.ma.us>

Am Tue, 1 Jun 2010 14:33:28 -0400
schrieb "Sotomayor, Vicente (ITD)" <Vicente.Sotomayor@state.ma.us>:

> Hello Everyone:
> 
> Does anyone a have a link the shows what steps are needed to for
> creating certs for a Provider and Consumer? I've been able to do it
> for Provider, but I'm stuck on what to do for the consumer.

What do you want to achieve? Is it just a TLS session or in addition a
SASL EXTERNAL authentication?
A startTLS session requires olcSyncrepl: starttls=yes
tls_cacert=/path/to/CA, you may add tls_reqcert=demand.
A SASL EXTERNAL authentication in addition requires a user certificate
and a certificate key.

-Dieter

-- 
Dieter Klünter | Systemberatung
sip: +49.40.20932173
http://www.dpunkt.de/buecher/2104.html
GPG Key ID:8EF7B6C6

References:
- TLS certs needed for Provider and consumer
  - From: "Sotomayor, Vicente (ITD)" <Vicente.Sotomayor@state.ma.us>

Prev by Date: RE: OpenLDAP configuration for ldap-group authentication on Apache2.x
Next by Date: Re: multiple instances
Index(es):
- Chronological
- Thread