Re: Change authentication for LDAP

[Mark Reynolds <mreynolds@xxxxxxxxxx>]

Hi,

On 3/22/19 9:46 AM, Zombie fork wrote:

Hi,

    We are trying to explore new methods of authentication. We want to move away from the traditional password based authentication to a more secure method like using Certificates , keys etc.

Is it possible to implement this? What alternatives do we have?

Yes, please check out the Admin guide....

You can use SSL client certificate authentication:

https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/using-based_client_authentication

Or, SASL/GSSAPI authentication:

https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/sasl

https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/configuring_kerberos

HTH,

Mark

Can this be applied on a specific user, ou , subtree etc.

Is there any documentation around this?

_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx

_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx