Re: SASL and GSSAPI (ITS#2944)

[sjh@google.com]

On Wednesday February 4, Quanah Gibson-Mount wrote:
> 
> 
> --On Thursday, January 29, 2004 2:45 AM +0000 openldap-its@OpenLDAP.org 
> wrote:
> > * When using TLS, you should turn off the SASL security layer (I see code 
> to do this,
> > but it's not complete).  This would give a workaround to the 1st problem.
> 
> Why?  Perhaps I want GSSAPI encryption on as well as TLS encryption.  It is 
> entirely possible that GSSAPI encryption could be stronger, depending on 
> the strength of your K5 key.

True.  But it could be an option...


-Seth