[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ssf settings for SASL and TLS

To: openldap-technical@openldap.org
Subject: Re: ssf settings for SASL and TLS
From: Dieter Klünter <dieter@dkluenter.de>
Date: Thu, 18 Feb 2016 11:19:40 +0100
In-reply-to: <56C539C4.80200@gmail.com>
Organization: AVCI
References: <56C539C4.80200@gmail.com>

Am Wed, 17 Feb 2016 20:25:56 -0700
schrieb Joshua Schaeffer <jschaeffer0922@gmail.com>:

> What is the proper way to setup SASL and TLS with different security
> strength factors? I've setup SASL on my OpenLDAP server so that it
> can connect to my Kerberos server using GSSAPI. I also have TLS setup
> for simple auth. My database config is below:
[...]
> olcSecurity: sasl=56 simple_bind=256 ssf=256

ssf=x specifies the overall security, a value '1' enables security.
This setting would meet your requirements:
olcSecurity: ssf=1 sasl=56 tls=256


-Dieter

-- 
Dieter Klünter | Systemberatung
http://sys4.de
GPG Key ID: E9ED159B
53°37'09,95"N
10°08'02,42"E

Follow-Ups:
- Re: ssf settings for SASL and TLS
  - From: Joshua Schaeffer <jschaeffer0922@gmail.com>

References:
- ssf settings for SASL and TLS
  - From: Joshua Schaeffer <jschaeffer0922@gmail.com>

Prev by Date: slapo-accesslog: wrong timestamp microseconds
Next by Date: Re: slapo-accesslog: wrong timestamp microseconds
Index(es):
- Chronological
- Thread