Am Dienstag 26 Oktober 2010, 10:49:09 schrieb Frederic Hornain:
Dear all,
For already few weeks, I search for a mean to have an encypted bindpw password in /etc/ldap.conf on my Fedora Linux Ldap client. OK, I have perfectly understood a simple bind requires that the client has the *cleartext* password.
Nonetheless, it seems it exists a SASL method which could permit without using Kerberos to have this functionality.
AFAIK the only SASL mechanism that nss_ldap supports is GSSAPI which in the end means Kerberos.
http://www.openldap.org/lists/openldap-technical/200809/msg00145.html
- If someone could give me a hand on that, I would appreciate;
It seems you are reading something wrong into that thread. It only lines out that a cleartext password, or something equivalent like a Kerberos keytab or Client Certificate + Key (if nss_ldap would support that) is needed.
Ralf