If you want to encrypt the login and password, you would use SSL.  I've never tried mod_auth_ldap, but I assume it would do nothing about encrypting the login and password between the browser and the server.   If mod_auth_ldap supports ssh, it is to encrypt the transmission between Apache and the ldap server.  You would only need mod_auth_ldap + SSH if the LDAP server was connected across an insecure link.
 
Joe Pearson
 
----- Original Message -----
Sent: Thursday, March 14, 2002 2:10 AM
Subject: authentication

Hello,
 
I currently work with apache 1.3.12, i want authenticate user (login/password) from server ldap, today (in my config) login and password are cleartext so i want to "crypt" there.
Should I use mod_ssl to do this or mod_auth_ldap (which also support ssh) ?
 
Thanks for your advice.
 
Regards, Lionel.

Reply via email to