Re: Cannot start kerberos signing/sealing when using TLS/SSL
"Markus Moeller" <[email protected]>
| Newsgroups | gmane.comp.lang.perl.modules.ldap |
|---|---|
| Message-ID | <[email protected]> |
"Quanah Gibson-Mount" <[email protected]> wrote in message news:13EB6539F13316BC67E8506F@[192.168.1.199]... > --On Sunday, November 15, 2009 10:36 PM +0000 Markus Moeller > <[email protected]> wrote: > >> It might be an AD setting (enforcing SSL). But does it make sense to use >> SASL/GSSAPI encryption on top of SSL ? > > Well, given things like MITM with SSL, it could be. ;) Plus it could be > possible the SASL SSF is higher than the SSL SSF. > The only problem with that is that the client not the server can control it (right now). It just says everything which is DES or better is OK. So possible yes but when ? >> An option would be definitely the best. > > Agreed. > > --Quanah > > > > -- > > Quanah Gibson-Mount > Principal Software Engineer > Zimbra, Inc > -------------------- > Zimbra :: the leader in open source messaging and collaboration >