Re: TLS/SSL problems

2007-05-31 Thread Craig
Buchan Milne wrote: It seems you don't seem to understand the difference between SASL and TLS. As it turns out, that's probably true. (I thought it was "simpler" than it really is...) Since the subject of your mail is about TLS, I assume that simple binds (where the cleartext password is se

Re: TLS/SSL problems

2007-05-30 Thread Buchan Milne
On Wednesday, 23 May 2007, Craig wrote: > I know about the "-x" option. But, once that happens, it looks like the > passwords are sent in clear text. (I did some packet traces and that's > what it looks like to me.) > > I need to have passwords sent over an encrypted connection. "-x" doesn't > give

Re: TLS/SSL problems

2007-05-29 Thread Craig
Matthew Hardin wrote: Craig said: [...] I know about the "-x" option. But, once that happens, it looks like the passwords are sent in clear text. (I did some packet traces and that's what it looks like to me.) That would only happen because an SSL or TLS connection is not being established. Se

RE: TLS/SSL problems

2007-05-23 Thread Matthew Hardin
Craig said: [...] > > I know about the "-x" option. But, once that happens, it looks like the > passwords are sent in clear text. (I did some packet traces and that's > what it looks like to me.) That would only happen because an SSL or TLS connection is not being established. See slapd.conf(5) a

Re: TLS/SSL problems

2007-05-23 Thread Dieter Kluenter
Craig <[EMAIL PROTECTED]> writes: > I am running openldap 2.2.13. I am having a problem getting TLS to > work. I have done numerous searches, but most web pages seem to deal > with LDAP/kerberos issues. We do not run kerberos. I am only trying to > prevent passwords from being sent in the clear. >

Re: TLS/SSL problems

2007-05-22 Thread Greg Martin
Craig, why do you feel this is a TLS issue? You may want to look at the FAQ page on TLS for some help. http://www.openldap.org/faq/data/cache/185.html or the admin guide http://www.openldap.org/doc/admin23/tls.html \\Greg Craig wrote: I am running openldap 2.2.13. I am having a problem gettin

Re: TLS/SSL problems

2007-05-22 Thread Craig
I know about the "-x" option. But, once that happens, it looks like the passwords are sent in clear text. (I did some packet traces and that's what it looks like to me.) I need to have passwords sent over an encrypted connection. "-x" doesn't give me that. Thanx for the thought, though. :)

Re: TLS/SSL problems

2007-05-22 Thread Aaron Richton
Option -X is for SASL configuration. If you want TLS, perhaps you mean -ZZ? I'm not sure what pages you're looking at that confuse TLS and Kerberos. They are separate topics; for example, the OpenLDAP Administrator's Guide has separate chapters for TLS and Kerberos. That may be a better source

Re: TLS/SSL problems

2007-05-22 Thread Quanah Gibson-Mount
--On Tuesday, May 22, 2007 6:36 PM -0700 Craig <[EMAIL PROTECTED]> wrote: I am running openldap 2.2.13. I am having a problem getting TLS to work. I have done numerous searches, but most web pages seem to deal with LDAP/kerberos issues. We do not run kerberos. I am only trying to prevent passwor

TLS/SSL problems

2007-05-22 Thread Craig
I am running openldap 2.2.13. I am having a problem getting TLS to work. I have done numerous searches, but most web pages seem to deal with LDAP/kerberos issues. We do not run kerberos. I am only trying to prevent passwords from being sent in the clear. I have followed the instructions on thi