[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SASL and GSSAPI (ITS#2944)

On Wednesday February 4, Quanah Gibson-Mount wrote:
> --On Thursday, January 29, 2004 2:45 AM +0000 openldap-its@OpenLDAP.org 
> wrote:
> > * When using TLS, you should turn off the SASL security layer (I see code 
> to do this,
> > but it's not complete).  This would give a workaround to the 1st problem.
> Why?  Perhaps I want GSSAPI encryption on as well as TLS encryption.  It is 
> entirely possible that GSSAPI encryption could be stronger, depending on 
> the strength of your K5 key.

True.  But it could be an option...