You could use IPTABLES As well and not have to play with the configuration
of FDS but I am sure you already figured this out.

Edward

On 5/7/07, ashley <[EMAIL PROTECTED]> wrote:


Yes I thought about that, but I'm supporting some legacy Linux/Unix
system which I provide LDAP/NIS auth from the Directory Server.

I don't really want to break things, I'm just phasing things out
gradually.

                                        Cheers then, Ashley


On Fri, 4 May 2007, Richard Megginson wrote:

> ashley wrote:
>>
>> It depends on your distribution but pretty much all the same as I found
it
>> you have to edit ldap.conf but you may have to do a little bit of
fiddling
>> before you can get it working.
>>
>> Anyways I've got this also documented on my web site
>>
>> http://www.csse.uwa.edu.au/~ashley/
>>
>> Look at LDAP Fedora Directory Server HOWTO with SSL & NOSSL for Unix/
Linux
>> / MacOSX / Windows Client Binding document.
>>
>> Look at section 3.3 Binding Linux/Unix Machines to LDAPs.
>>
>> I've did this last year and should still be applicable.
> Thanks Ashley.
>
> Another trick you can use on the server side is to just shut off the
> non-secure port by using a value of 0 for cn=config nsslapd-port.  Then
the
> server will only listen for LDAPS requests.
>>
>>                     Regards Ashley
>>
>>
>> On Thu, 3 May 2007, Eric Brown wrote:
>>
>>> I have got SSL set up and working, but I have not figured out how I
>>> can require that users only connect through a secure connection (SSL
>>> or TLS) and deny access to cleartext communication.
>>>
>>> I was able to do this with OpenLDAP, but it was done in the slapd.conf
>>> file. I have not found any documentation on how to set it up or if it
>>> is even possible with FDS.
>>>
>>> Is there any doc or does anyone have any information on how to do
this?
>>>
>>> Thanks
>>> Eric
>>>
>>> --
>>> Fedora-directory-users mailing list
>>> [email protected]
>>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>>
>>>
>>> !DSPAM:272,4639f614145012118015795!
>>>
>>
>
>
> !DSPAM:272,463b48cc91651926681497!
>

--
Ashley Chew - Systems Administrator
School of Computer Science and Software Engineering
University of Western Australia
Tel: (+61 8) 6488 7082 - Fax: (+61 8) 6488 1089
[EMAIL PROTECTED] - http://www.csse.uwa.edu.au/~ashley

"There is no such thing as Fate, Fate is what you make of it!"

--
Fedora-directory-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-directory-users

--
Fedora-directory-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Reply via email to