[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ssf settings for SASL and TLS



Am Wed, 17 Feb 2016 20:25:56 -0700
schrieb Joshua Schaeffer <jschaeffer0922@gmail.com>:

> What is the proper way to setup SASL and TLS with different security
> strength factors? I've setup SASL on my OpenLDAP server so that it
> can connect to my Kerberos server using GSSAPI. I also have TLS setup
> for simple auth. My database config is below:
[...]
> olcSecurity: sasl=56 simple_bind=256 ssf=256

ssf=x specifies the overall security, a value '1' enables security.
This setting would meet your requirements:
olcSecurity: ssf=1 sasl=56 tls=256


-Dieter

-- 
Dieter Klünter | Systemberatung
http://sys4.de
GPG Key ID: E9ED159B
53°37'09,95"N
10°08'02,42"E