Re: Cannot start kerberos signing/sealing when using TLS/SSL

[email protected] (Quanah Gibson-Mount)
Newsgroups perl.ldap
Message-ID <13EB6539F13316BC67E8506F@[192.168.1.199]> 
--On Sunday, November 15, 2009 10:36 PM +0000 Markus Moeller 
<[email protected]> wrote:

> It might be an AD setting (enforcing SSL). But does it make sense to use
> SASL/GSSAPI encryption on top of SSL ?

Well, given things like MITM with SSL, it could be. ;)  Plus it could be 
possible the SASL SSF is higher than the SSL SSF.

> An option would be definitely  the best.

Agreed.

--Quanah



--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.