Re: [389-users] require ssl/tls only for binding as user

[Johannes Woerner <jkwoerner@xxxxxxxxxxxxxx>]

> I'm evaluating the migrating of an openldap installation to

> 389 directory server (ca 1200 user objects).
> With openldap I can restrict client authentication to ssl/tls ldap
> connections and
> in parallel allow anonymous (unencrypted) access to items like phone number etc.
> (slapd.conf with: "security simple_bind=56")
>
> Is there a way you can do this with 389 directory server?

Yes. By using ACIs and the features described here :
http://directory.fedoraproject.org/wiki/Roadmap#389_Directory_Server_1.2.3_-_October_7.2C_2009

Thank you, I missed this.

Best regards
Johannes

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users