Re: ldapi without TLS and ldap with TLS?

2013-02-19 Thread Patrick Lists
Hi Philip, Thank you for your elaborate feedback. Comments inline. On 02/19/2013 03:42 AM, Philip Guenther wrote: [snip] We need to protect corporate data in LDAP from being modified or even accessed by untrusted resources. Yes. [snip] Because some of the applications cannot be

Re: ldapi without TLS and ldap with TLS?

2013-02-18 Thread Patrick Lists
Thank you for your feedback Philip. Comments inline. On 02/18/2013 07:16 AM, Philip Guenther wrote: On Mon, 18 Feb 2013, Patrick Lists wrote: I'm tying achieve the following with OpenLDAP RE24 from last week: Connections on ldapi:/// are plain text and ldap connections require TLS with

Re: ldapi without TLS and ldap with TLS?

2013-02-18 Thread Philip Guenther
On Mon, 18 Feb 2013, Patrick Lists wrote: On 02/18/2013 07:16 AM, Philip Guenther wrote: On Mon, 18 Feb 2013, Patrick Lists wrote: I'm tying achieve the following with OpenLDAP RE24 from last week: Connections on ldapi:/// are plain text and ldap connections require TLS with

Re: ldapi without TLS and ldap with TLS?

2013-02-17 Thread Philip Guenther
On Mon, 18 Feb 2013, Patrick Lists wrote: I'm tying achieve the following with OpenLDAP RE24 from last week: Connections on ldapi:/// are plain text and ldap connections require TLS with client cert auth. Perhaps it would be help if you started by answering, at least for yourself, what