Hi Paul,
I'm afraid we don't do that :-). While what you propose would
indeed encrypt the initial connection password, all further traffic
would be in the clear. Since LDAP directories are usually user
repositories, this would expose *their* details, which is usually
unacceptable. Most people either use JX within secure networks (in
which case you don't care about the connection password being clear
text) or with SSL (in which case everything is encrypted). So no-one
has ever asked for this before!
So while you're quite correct that the standard allows for it,
I'm afraid we've only implemented the most popular options; SASL
using client certificates, and SASL with GSSAPI. I'm afraid we don't
plan to implement this option at this stage.
Thanks for the correction re the acronym; I'd missed that!
cheers,
- Chris
On 12/10/2007, at 2:23 AM, Paul Zuefeldt wrote:
Hi Chris,
I am wanting to connect to a directory using SASL DIGEST-MD5
authentication, rather than simple, but the dropdown menu only
offers this option with SSL. One of the reasons for choosing DIGEST-
MD5 authentication is to encrypt the password during transit so
that you don't have to connect with SSL; so, this particular choice
of options doesn't seem entirely logical.
A related note: SASL stands for Simple Authentication and Security
Layer. (The help pages say something like Secure Authenticate
Socket Layer.)
BTW, I'm currently running build JXv3.2 2007-02-26 21:08 EST. If
this has already been addressed I'll be happy to upgrade.
Thanks,
Paul Zuefeldt
Pathmaker Group
Office: 817-410-5722 x112
Mobile: 940-453-2559
www.pathmaker.biz
"Clearing your path through the
identity management jungleTM"
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Jxplorer-devel mailing list
Jxplorer-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jxplorer-devel
