I am an intern who is currently working on the project for implementing a
LDAP Connector for carbon 5 User Core which supports StartTLS.
StartTLS allows to serialize secure and plain requests against a LDAP
server on a single connection.Where, an initial context is created first
and a TLS can be initiated, followed by a TLS handshake. Any method that is
invoked in the context will use security layer that is negotiated. The TLS
can be terminated without closing the underlying network connection and
the context can be used to communicate with the server without a TLS
The LDAP connector to be implemented will be consisting the identity
store which is defined with the user management operations and the
credential store that manages the credentials and authentication.
The credential store methods will be using the security layer by
initializing the StartTLS.And, in identity store, the "write methods" will
be supporting the Start TLS whereas the "read methods" are to be invoked as
If there are any suggestions for changes, please do reply and specify.
Intern ,Software Engineering
Lean. Enterprise. Middleware.
Architecture mailing list