[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: LDAP and SSL

To: criderkevin@aol.com
Subject: Re: LDAP and SSL
From: Dan White <dwhite@olp.net>
Date: Mon, 26 Sep 2011 13:33:29 -0500
Cc: openldap-technical@openldap.org
Content-disposition: inline
In-reply-to: <8CE4A6E3B1B2DB8-1FC8-FE607@webmail-m166.sysops.aol.com>
References: <8CE4A6E3B1B2DB8-1FC8-FE607@webmail-m166.sysops.aol.com>
User-agent: Mutt/1.5.21 (2010-09-15)

On 26/09/11 10:18 -0400, criderkevin@aol.com wrote:


I'm struggling with the need for SSL...

We will use our new LDAP for apps. These servers are all locally housed so
each app server will talk to the LDAP server over our network. (why) Would
we need SSL?

What about for mail services? It seems to me that our mail server would
also talk directly to the LDAP server...what am I missing here that
dictates the use of SSL with LDAP? I could see if one had their LDAP open
to be accessible direct access from off-network. Perhaps SSL is used
simply as a means to authenitcate?


If you're performing TLS authentication, using client certificates, via
STARTTLS, then using X.509 provides for a strong authentication mechanism
using SASL (EXTERNAL).

That's the one benefit that I know of beyond the obvious session based
encryption that you obtain using certificates.

--
Dan White

Follow-Ups:
- Re: LDAP and SSL
  - From: Christ Schlacta <lists@aarcane.org>

References:
- LDAP and SSL
  - From: criderkevin@aol.com

Prev by Date: tunning search with less tha filter
Next by Date: Re: LDAP and SSL
Index(es):
- Chronological
- Thread