Re: Secure authentication to LDAP via TLS

On Tue, 28 Dec 2010 14:42:09 +0100
Róbert Čerňanský <[email protected]> wrote:

> I'd like configure DLZ to use secure authentication to the LDAP
> server; preferably via TLS.  However I can not figure out how to turn
> it on for DLZ.
[...]
> When I've tried to use ldaps:// in queries (to use SSL) then I've got
> error: "named[13094]: lookup query must not specify a port".
[...]
> Does anyone know how to turn on TLS for DLZ to LDAP connections?

I should probably point out that when I was trying ldaps:// as
described in my previous mail above, I did _not_ specified a port and
yet I've got "lookup query must not specify a port" message.  It looks
as if the port is being added automatically by DLZ when ldaps:// is
used.

I've also considered another alternative to secure authentication --
Kerberos.  I have Kerberos 5 running and working but DLZ can be
configured just for Kerberos 4 (krb41, krb42).  Is there a way that
DLZ can authenticate to LDAP also with Kerberos 5?

Regards,
Robert


-- 
Robert Cernansky
E-mail: [email protected]
Jabber: [email protected]

------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl