Re: TLS / secure ldap transactions, userPassword hashing questions

2005-07-16 Thread Kurt D. Zeilenga
At 02:14 PM 7/15/2005, Aaron Richton wrote: >> Would it a big deal to make a feature request for something like >> SHA-256, SHA-512, and/or Blowfish support? > >Well, in terms of going to the ITS page and getting something requested on >the record, probably not. But in terms of it actually getting

Re: TLS / secure ldap transactions, userPassword hashing questions

2005-07-15 Thread Aaron Richton
> So it would seem the short answer to my question is I either choose one > of the ones listed in the manpage, or do something like add the > additional hash support to crypt() itself, which doesn't appeal to me > since I'd be changing one of the distributed-with-the-OS-core > functions. Depends o

Re: TLS / secure ldap transactions, userPassword hashing questions

2005-07-14 Thread Bill Johnstone
Thanks for the response. --- Aaron Richton <[EMAIL PROTECTED]> wrote: > This e-mail appears to be premised on out of date information. It > sounds > like you're implementing a new server; I strongly suggest using the > latest > version of OpenLDAP 2.3 available from openldap.org. Yes, this would

Re: TLS / secure ldap transactions, userPassword hashing questions

2005-07-14 Thread Aaron Richton
This e-mail appears to be premised on out of date information. It sounds like you're implementing a new server; I strongly suggest using the latest version of OpenLDAP 2.3 available from openldap.org. If nothing else, the documentation improvements will save you time; in these answers, I refer to d

TLS / secure ldap transactions, userPassword hashing questions

2005-07-13 Thread Bill Johnstone
Like many, I'm planning to use OpenLDAP for user authentication and NSS. However, after reading the documentation for OpenLDAP, I'm still confused/uncertain on a couple of things. 1. I want to make sure all ldap sessions occur via TLS, enforced by slapd, and since ldaps:// is considered deprecate