heya,

On Saturday 21 May 2005 15:35, Chris S wrote:
> Great, thank you very much for the answer. So SASL, in regard to LDAP,
> would be the security authentication layer and is a good thing to get
> working. I'll give it another go!

Not necessarily. Like I said it depends on your security model. Personally I 
use -x myself because I always use either tls or ssl ldap connections. This 
way my password is encrypted at all times. Ofcourse if you were worried about 
your password traversing the network at ALL then you could use the mechanisms 
like cram / digest that make one time hashes and send that instead thus 
mitigating the risk in that respect. Its about what fits your security 
requirements more, for most people though, -x with tls / ssl is fine.

b
-- 
Benjamin Smee (strerror)
497F 5E98 1FA0 C313 EA0B 08C7 004A 66ED 448B E78C

Attachment: pgpzsl558Bw92.pgp
Description: PGP signature

Reply via email to