Re: Having an issue with SSF

Pat Riehecky prieheck@iwu.edu writes:

I am trying to take advantage of the localSSF option in OpenLDAP 2.4. This system will only allow one user to login and I like to leave a door for me to get back in if I forget the admin password.

My goal is to get the local socket running with no security and require anyone using a TCP connection to use TLS with at least a 3DES cypher. I would prefer updates happen over a higher grade encyption, but eh....

In doing so I have put the following in my slapd.conf

.....

localSSF 0

default localssf is 71. [...]

-Dieter