Re: [CentOS] securing ldap with tls and security

2011-05-26 Thread Craig White
On Tue, 2011-05-24 at 16:52 -0400, Scott Robbins wrote: > On Tue, May 24, 2011 at 04:49:09PM -0400, David Mehler wrote: > > Hello, > > I'm trying to set up a centos 5.3 machine to do authentication via > > openldap. I've got it working, I'm not sure if I have it 100% right, > > but I can use ldapse

Re: [CentOS] securing ldap with tls and security

2011-05-24 Thread Scott Robbins
On Tue, May 24, 2011 at 05:37:01PM -0400, Meenoo Shivdasani wrote: > On Tue, May 24, 2011 at 4:52 PM, Scott Robbins wrote: > > > I'm going to post a link to my own page on it---which has links to other > > pages.  Among other things, it goes through TLS. > > > > http://home.roadrunner.com/~comput

Re: [CentOS] securing ldap with tls and security

2011-05-24 Thread Miguel Medalha
I think that the most secure setup is to use both LDAPI (ldap connections over Unix sockets) for connections inside the ldap server and TLS for connections from everywhere else on the network. Plus, ldapi connections are much faster than TCP connections. Am I wrong? ___

Re: [CentOS] securing ldap with tls and security

2011-05-24 Thread Devin Reade
--On Tuesday, May 24, 2011 02:12:51 PM -0700 Paul Heinlein wrote: > This /etc/ldap.conf works well for me on CentOS 5: > > - %< - ># failover doesn't work using the newer 'uri' directive. ># can go to ldap1; use ldap2 for backup > host ldap1.domain.com ldap2.domain.com > port 389 I have

Re: [CentOS] securing ldap with tls and security

2011-05-24 Thread Meenoo Shivdasani
On Tue, May 24, 2011 at 4:52 PM, Scott Robbins wrote: > I'm going to post a link to my own page on it---which has links to other > pages.  Among other things, it goes through TLS. > > http://home.roadrunner.com/~computertaijutsu/ldap.html Scott, I didn't read through the whole document, but you

Re: [CentOS] securing ldap with tls and security

2011-05-24 Thread Paul Heinlein
On Tue, 24 May 2011, David Mehler wrote: > Having got this far if anyone with a working ldap authentication > system could give my config a sanity check let me know. My goal now > is to get tls encryption going so that usernames and passwords > aren't sent in the clear. I'm using self-signed ce

Re: [CentOS] securing ldap with tls and security

2011-05-24 Thread m . roth
David Mehler wrote: > Hello, > I'm trying to set up a centos 5.3 machine to do authentication via > openldap. I've got it working, I'm not sure if I have it 100% right, > but I can use ldapsearch to query the directory, use finger, id, > chown, and other utilities with ldap usernames and groups, lo

Re: [CentOS] securing ldap with tls and security

2011-05-24 Thread Scott Robbins
On Tue, May 24, 2011 at 04:49:09PM -0400, David Mehler wrote: > Hello, > I'm trying to set up a centos 5.3 machine to do authentication via > openldap. I've got it working, I'm not sure if I have it 100% right, > but I can use ldapsearch to query the directory, use finger, id, > chown, and other ut

[CentOS] securing ldap with tls and security

2011-05-24 Thread David Mehler
Hello, I'm trying to set up a centos 5.3 machine to do authentication via openldap. I've got it working, I'm not sure if I have it 100% right, but I can use ldapsearch to query the directory, use finger, id, chown, and other utilities with ldap usernames and groups, log in via ssh as an ldap user a