Uploaded image for project: 'OpenDJ'
  1. OpenDJ
  2. OPENDJ-416

(patch) Clarify authmethod=ssl and also give example for ssf in ssf section

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Done
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 2.4.4
    • Fix Version/s: 2.6.0
    • Component/s: documentation
    • Labels:
      None

      Description

      — chap-privileges-acis.xml (revision 7653)
      +++ chap-privileges-acis.xml (working copy)
      @@ -334,9 +334,10 @@
      <term><literal>authmethod != "none|simple|ssl|sasl <replaceable>mech</replaceable>"</literal></term>
      <listitem>
      <para>Here you use <literal>none</literal> to mean do not check,

      • <literal>simple</literal> for simple authentication, <literal>ssl</literal>
      • for LDAPS, <literal>sasl <replaceable>mech</replaceable></literal> for
      • SASL where <replaceable>mech</replaceable> is DIGEST-MD5, EXTERNAL, or
        + <literal>simple</literal> for simple authentication,
        + <literal>ssl</literal> for certificate-based authentication via LDAPS,
        + <literal>sasl <replaceable>mech</replaceable></literal> for SASL
        + where <replaceable>mech</replaceable> is DIGEST-MD5, EXTERNAL, or
        GSSAPI.</para>
        </listitem>
        </varlistentry>
        @@ -388,7 +389,9 @@
        <term><literal>ssf <= "<replaceable>strength</replaceable>"</literal></term>
        <listitem>
        <para>Here the security strength factor pertains to the cipher key
      • strength for connections using DIGEST-MD5, GSSAPI, SSL, or TLS.</para>
        + strength for connections using DIGEST-MD5, GSSAPI, SSL, or TLS. For
        + example, to require that the connection must have at least 128 bits
        + of encryption, one would specify <literal>ssf >= 128</literal></para>
        </listitem>
        </varlistentry>
        <varlistentry>

        Attachments

          Activity

            People

            Assignee:
            Mark Mark Craig
            Reporter:
            jblaine jblaine
            Dev Assignee:
            Mark Craig Mark Craig
            QA Assignee:
            Christophe Sovant Christophe Sovant
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: