Re: ssf settings for SASL and TLS

Am Wed, 17 Feb 2016 20:25:56 -0700 schrieb Joshua Schaeffer jschaeffer0922@gmail.com:

What is the proper way to setup SASL and TLS with different security strength factors? I've setup SASL on my OpenLDAP server so that it can connect to my Kerberos server using GSSAPI. I also have TLS setup for simple auth. My database config is below:

[...]

olcSecurity: sasl=56 simple_bind=256 ssf=256

ssf=x specifies the overall security, a value '1' enables security. This setting would meet your requirements: olcSecurity: ssf=1 sasl=56 tls=256

-Dieter