Security between server and client nodes.

2011-11-28 Thread Jayavant Patil
Hi, I am using openLDAP-2.4.19-4 on fedora 12 machine. I want to make server secure from client nodes so that clients don't hack the server node. Hack in the sense that one client doesn't even read the data of another client, client doesn't tamper the server directory information or try to spoof

Re: Security between server and client nodes.

2011-11-28 Thread Raffael Sahli
Hi I think you mean SSL connection or the STARTTLS Layer...? Please read the manual http://www.openldap.org/doc/admin24/tls.html And tree security: On my server, a client user can only see his own object: Maybe create a rule like this: access to filter=(objectClass=simpleSecurityObject)

Re: Security between server and client nodes.

2011-11-29 Thread Jayavant Patil
>Mon, 28 Nov 2011 11:25:16 +0100 Raffael Sahli wrote: >Hi >I think you mean SSL connection or the STARTTLS Layer...? >Please read the manual http://www.openldap.org/doc/admin24/tls.html Ok. >And tree security: >On my server, a client user can only see his own object: Are you using simple authen

Re: Security between server and client nodes.

2011-11-29 Thread Raffael Sahli
On 11/29/2011 01:56 PM, Jayavant Patil wrote: >Mon, 28 Nov 2011 11:25:16 +0100 Raffael Sahli mailto:pub...@raffaelsahli.com>> wrote: >Hi >I think you mean SSL connection or the STARTTLS Layer...? >Please read the manual http://www.openldap.org/doc/admin24/tls.html Ok. >And tree security: >O

Re: Security between server and client nodes.

2011-11-29 Thread Jayavant Patil
On Tue, Nov 29, 2011 at 6:26 PM, Jayavant Patil wrote: > > >>Mon, 28 Nov 2011 11:25:16 +0100 Raffael Sahli > wrote: > >>Hi > > >>I think you mean SSL connection or the STARTTLS Layer...? > >>Please read the manual http://www.openldap.org/doc/admin24/tls.html > >Ok. > > >>And tree security: > >>O

Re: Security between server and client nodes.

2011-11-29 Thread Bjørn Ruberg
On 11/30/2011 08:01 AM, Jayavant Patil wrote: [...] I have two users ldap_6 and ldap_7. I want to restrict a user to see his own data only. In slapd.conf, I specified the rule as follows: access to * by self write. by * none But ldap_6 can

Re: Security between server and client nodes.

2011-11-29 Thread Raffael Sahli
On 11/30/2011 08:01 AM, Jayavant Patil wrote: On Tue, Nov 29, 2011 at 6:26 PM, Jayavant Patil mailto:jayavant.pati...@gmail.com>> wrote: >>Mon, 28 Nov 2011 11:25:16 +0100 Raffael Sahli mailto:pub...@raffaelsahli.com>> wrote: >>Hi >>I think you mean SSL connection or the STA

Re: Security between server and client nodes.

2011-11-30 Thread Jayavant Patil
>>On 11/30/2011 08:01 AM, Jayavant Patil wrote: >> >> >> On Tue, Nov 29, 2011 at 6:26 PM, Jayavant Patil >> mailto:jayavant.pati...@gmail.com>> wrote: >> >> >> >>Mon, 28 Nov 2011 11:25:16 +0100 Raffael Sahli >> mailto:pub...@raffaelsahli.com>> wrote: >> >>Hi >> >> >>I think you mean

Re: Security between server and client nodes.

2011-11-30 Thread Raffael Sahli
On 11/30/2011 01:48 PM, Jayavant Patil wrote: >>On 11/30/2011 08:01 AM, Jayavant Patil wrote: >> >> >> On Tue, Nov 29, 2011 at 6:26 PM, Jayavant Patil >> mailto:jayavant.pati...@gmail.com> >> wrote: >> >> >> >>Mon, 28 Nov

Re: Security between server and client nodes.

2011-12-01 Thread Jayavant Patil
On Wed, 30 Nov 2011 14:18:00 +0100 Raffael Sahli wrote: >On 11/30/2011 01:48 PM, Jayavant Patil wrote: > > > >>On 11/30/2011 08:01 AM, Jayavant Patil wrote: > >> > >> > >> On Tue, Nov 29, 2011 at 6:26 PM, Jayavant Patil > >> mailto:jayavant.pati...@gmail.com> >

Re: Security between server and client nodes.

2011-12-01 Thread Raffael Sahli
On 12/01/2011 02:42 PM, Jayavant Patil wrote: On Wed, 30 Nov 2011 14:18:00 +0100 Raffael Sahli mailto:pub...@raffaelsahli.com>> wrote: >On 11/30/2011 01:48 PM, Jayavant Patil wrote: > > > >>On 11/30/2011 08:01 AM, Jayavant Patil wrote: > >> > >> > >> On Tue, Nov 29, 2011 at 6:26 PM, Jayavant Pa

Re: Security between server and client nodes.

2011-12-01 Thread Jayavant Patil
On Thu, Dec 1, 2011 at 7:12 PM, Jayavant Patil wrote: > On Wed, 30 Nov 2011 14:18:00 +0100 Raffael Sahli > wrote: > >On 11/30/2011 01:48 PM, Jayavant Patil wrote: > > > > > > >>On 11/30/2011 08:01 AM, Jayavant Patil wrote: > > >> > > >> > > >> On Tue, Nov 29, 2011 at 6:26 PM, Jayavant Patil > >

Re: Security between server and client nodes.

2011-12-01 Thread Raffael Sahli
On 12/02/2011 07:49 AM, Jayavant Patil wrote: On Thu, Dec 1, 2011 at 7:12 PM, Jayavant Patil mailto:jayavant.pati...@gmail.com>> wrote: On Wed, 30 Nov 2011 14:18:00 +0100 Raffael Sahli mailto:pub...@raffaelsahli.com>> wrote: >On 11/30/2011 01:48 PM, Jayavant Patil wrote: >

Re: Security between server and client nodes.

2011-12-02 Thread Jayavant Patil
On Fri, Dec 2, 2011 at 12:19 PM, Jayavant Patil wrote: > > > On Thu, Dec 1, 2011 at 7:12 PM, Jayavant Patil > wrote: > >> On Wed, 30 Nov 2011 14:18:00 +0100 Raffael Sahli < >> pub...@raffaelsahli.com> wrote: >> >On 11/30/2011 01:48 PM, Jayavant Patil wrote: >> > >> > >> > >>On 11/30/2011 08:01 A

Re: Security between server and client nodes.

2011-12-02 Thread Raffael Sahli
On 12/02/2011 09:58 AM, Jayavant Patil wrote: On Fri, Dec 2, 2011 at 12:19 PM, Jayavant Patil mailto:jayavant.pati...@gmail.com>> wrote: On Thu, Dec 1, 2011 at 7:12 PM, Jayavant Patil mailto:jayavant.pati...@gmail.com>> wrote: On Wed, 30 Nov 2011 14:18:00 +0100 Raffae