Re: Force use of secure connections

[Patrick M Landry <patrick.landry@xxxxxxxxxxxxx>]

I don't know if this will be of any help to you but here are the instructions

for RHDS 9.

https://access.redhat.com/documentation/en-us/red_hat_directory_server/9.0/html/administration_guide/secureconnections#requiring-secure-connections

Chapter 7. Configuring Secure Connections Red Hat Directory Server 9.0 | Red Hat Customer Portal Alternatively, use the nsslapd-minssf-exclude-rootdse configuration attribute. This sets a minimum SSF setting for all connections to the Directory Server except for queries against the root DSE. A client may need to obtain information about the server configuration, like its default naming context, before initiating an operation. access.redhat.com

-- 
Patrick Landry
Director, University Computing Support Services
University of Louisiana at Lafayette
P.O. Box 43621
Lafayette, LA 70504
(337) 482-6402
patrick.landry@xxxxxxxxxxxxx
–––––––––––––––––––––––––
Université des Acadiens

---

From: Matthew Aguirre <matt.aguirre@xxxxxxxxxxxxxxxxx>
Sent: Tuesday, March 10, 2020 3:00 PM
To: 389-users@xxxxxxxxxxxxxxxxxxxxxxx <389-users@xxxxxxxxxxxxxxxxxxxxxxx>
Subject: [389-users] Force use of secure connections

 

Is there a way to disable unsecured use of port 389?  I am using FreeIPA, so the client setup uses port 389 with TLS and that is fine, but I'd like to be able to not allow unsecured connections as much as possible.

I was able to do this in OpenLdap, but haven't seen a comparable solution in ds-389.

--

Matt

_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx