[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: LDAP Crafted Search Request Access Allowed



Net Warrior wrote:
> Based on the the  ACL's I posted from my configuration, what else can you
> recommend to include, tweak or modify?

I did not have a closer look at your ACLs.

ACL design depends very much on *your* requirements and system landscape.
For example I've designed the system which does not allow any anonymous access
and authorizes on a paranoid need-to-know principle.

The problem is: If you allowed anonymous access in the past it's usually hard
to turn on authentication and authorization for all your existing applications.

All in all it's your homework.

Ciao, Michael.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature