qazmlp wrote: > We have a setup where there are application servers have permanent > connection with LDAP server. What I mean as permanent connection here is > that, there are no sessions maintained for each data access, request > execution between the LDAP client and the server. > To make the communication secured, we have decided to configure both LDAP > client and the server using IPSec configuration. I would like to get more > suggestions in this aspect especially about whether this is sufficient or > it is necessary to have TLS/SASL based security checks.
Personally I'd prefer LDAP over SSL/TLS or StartTLS extended operation over deploying IPsec. SSL/TLS is just a matter of server (and client) configuration. It will secure your LDAP connection independent from the underlying network configuration. Think of (the lack of) secure change management in a bigger organization where one unit is responsible for the directory services and another one changes IP routing for the IPsec tunnels without telling the directory people... Ciao, Michael. --- You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.
