AoJ / openssh-lpk

Automatically exported from code.google.com/p/openssh-lpk
0 stars 0 forks source link

LDAPS #3

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
could you explain why don't support ldaps? the ldapsearch tool can connect
to ldap and ldaps too with same ldap_sasl_bind function.

Original issue reported on code.google.com by gabor.ma...@gmail.com on 18 Oct 2008 at 12:53

GoogleCodeExporter commented 9 years ago
I'm also curious as to the limitation.  This would be a desired feature.

Original comment by mnsli...@gmail.com on 20 Nov 2008 at 8:52

GoogleCodeExporter commented 9 years ago
LDAPS is deprecated, LDAP+TLS should be used instead, in order to keep the patch
small and to follow recommendation to use to LDAP+TLS, LDAPS was removed...

Any reason that deny usage of LDAP+TLS ? instead of LDAPs ?

Original comment by eric.a...@gmail.com on 25 Nov 2008 at 4:02

GoogleCodeExporter commented 9 years ago
By that logic, SMTPS, POP3S and IMAPS should not be supported in any email 
clients:
http://en.wikipedia.org/wiki/STARTTLS

Every LDAP client I need for authentication infrastructure, except LPK, 
supports LDAPS.

BTW., ldap_init is also deprecated, can we get ldap_initialize instead (then we 
get ldaps for free).

(Our security group prefers SSL-only protocols when available when authorizing 
firewall access)

Original comment by bgmi...@gmail.com on 22 Jan 2013 at 12:01

GoogleCodeExporter commented 9 years ago
Patch to support LDAPS I created for my build for RHEL5.

Original comment by bgmi...@gmail.com on 22 Jan 2013 at 2:15

Attachments: