Re: SASL auth, SSL via StartTLS vs Kerberized SSL via StartTLS

2013-11-20 Thread Predrag Punosevac
Predrag Punosevac wrote: > I am trying to get my head wrapped around securing LDAP so please > forgive me this n00b questions. My final goal is to replace our current > NFS+NIS with NFS+LDAP+[Kerberos] set up. > > I see by default OpenLDAP clients are authenticating via SASL. I also > see the Ke

SASL auth, SSL via StartTLS vs Kerberized SSL via StartTLS

2013-11-19 Thread Predrag Punosevac
I am trying to get my head wrapped around securing LDAP so please forgive me this n00b questions. My final goal is to replace our current NFS+NIS with NFS+LDAP+[Kerberos] set up. I see by default OpenLDAP clients are authenticating via SASL. I also see the Kerberos can be used with SASL. Could