port level security for auth and anon

I am looking for help with setup of security with my openldap config. I currently have RHEL 6 with ldap:// and ldaps:// working for both auth binds and anon binds. What I want to do is allow anon binds on ldap:// and require authentication over an encrypted stream on ldaps:// my current

ACL peername

Hi, i have a problem with ACLs. I will to grant access to IP. my ACL: olcAccess: to dn.subtree=ou=people,dc=example,dc=de by group.exact=cn=lda,ou=Endsysteme,dc=example,dc=de write by group.exact=cn=kon,ou=Endsysteme,dc=example,dc=de read by peername.ip=127.0.0.1 read by * none But i become

Slapd Security based on port

Is it possible to prevent anonymous and unauthenticated binds to ldaps:// 636 but allow them on ldap:// 389? I want to allow staff to query my ldaps:// outside of my network while requiring them to login to do so but allow anyone to bind (anonymous, unauthenticated, or authenticated)

question about cn=config replication and security.

Hello. I'm running a pair of openldap 2.4 servers which replicate cn=config DB in mirror mode. Is there a way to configure a RO user (like user from BDB) for cn=config DB, so should someone get a hold of it's password, and still will not be able to change the configs ? Regards.

Re: Slapd Security based on port

I want to apologize in advance for the forthcoming duplicated messages. My original question wasnt very clear and neither of them were getting to the list and I didnt know why. Maybe a 24hr lock out for new posters. Chris Jackson On Feb 11, 2011, at 9:50 AM, Chris Jackson wrote: Is it

Re: ACL peername

Natalia wrote: Hi, i have a problem with ACLs. I will to grant access to IP. my ACL: olcAccess: to dn.subtree=ou=people,dc=example,dc=de by group.exact=cn=lda,ou=Endsysteme,dc=example,dc=de write by group.exact=cn=kon,ou=Endsysteme,dc=example,dc=de read by peername.ip=127.0.0.1 read by *

Mac OS X OpenLDAP allows anonymous access to all fields

The ongoing saga... While trying to add the ACL for to hide userPassword, we get the following error: ldap_modify: Insufficient access (50) I'm beginning to think Apple has this locked down... Robert Threet http://yesistilluseperl.blogspot.com/

Re: port level security for auth and anon

Christopher Louis Jackson wrote: I am looking for help with setup of security with my openldap config. I currently have RHEL 6 with ldap:// and ldaps:// working for both auth binds and anon binds. What I want to do is allow anon binds on ldap:// and require authentication over an encrypted

Re: Mac OS X OpenLDAP allows anonymous access to all fields

RAT wrote: The ongoing saga... While trying to add the ACL for to hide userPassword, we get the following error: ldap_modify: Insufficient access (50) I'm beginning to think Apple has this locked down... You should ask Apple. -- -- Howard Chu CTO, Symas Corp.

RE: How to use LDAP_OPT_CONNECT_ASYNC?

-Original Message- From: masar...@aero.polimi.it [mailto:masar...@aero.polimi.it] Sent: Thursday, February 03, 2011 9:35 PM ldap_int_poll() will return -2 if timeout is 0 and the filedes was not active. So ldap_send_server_request() will return LDAP_X_CONNECTING if async. I've hit

Re: How to use LDAP_OPT_CONNECT_ASYNC?

Ian Puleston wrote: -Original Message- From: masar...@aero.polimi.it [mailto:masar...@aero.polimi.it] Sent: Thursday, February 03, 2011 9:35 PM ldap_int_poll() will return -2 if timeout is 0 and the filedes was not active. So ldap_send_server_request() will return LDAP_X_CONNECTING if