[Date Prev][Date Next] [Chronological] [Thread] [Top]


I'm a little confused by the word "deprecated" here in reference to ldaps.  I thought ldaps was ssl encrypted openldap traffic?  I guess I'm not understanding what the proper way to configure openldap and/or initiate encrypted traffic is based on this statement.  Pointers to documentation more than welcome.

-----Original Message-----
From:	Kurt D. Zeilenga [mailto:Kurt@OpenLDAP.org]
Sent:	Sat 6/15/2002 9:33 PM
To:	Benoit LEROYER
Cc:	Informations; openldap-software@OpenLDAP.org
Subject:	Re: TSL / SSL
At 10:07 AM 2002-06-14, Benoit LEROYER wrote:
>What is the difference between starttls et ldaps ?

Start TLS (RFC 2830) is the standard track mechanism,
an LDAP operation, used in to establish TLS.

ldaps:// is a deprecated, non-standard track mechanism
for establishing TLS based upon mutually agreed upon
TCP service ports.

OpenLDAP supports both mechanisms.


>Kurt D. Zeilenga wrote:
>>At 09:46 AM 2002-06-14, Informations wrote:
>>>if i use only ldaps protocol (openldap compiled with openssl) with crypt Userpassword,  is-it secure ?
>>>if not what is the better solution ?
>>Better, as in stronger?  The strongest authentication
>>mechanism supported by OpenLDAP is StartTLS+SASL/EXTERNAL.
>Benoit LEROYER - G.I.D.E (benoit@gide.net)
>Tél :
>Web : http://www.gide.net