On Sat, 2013-03-30 at 13:51 -0400, Stormy wrote:
At 12:05 PM 3/30/2013 +1000, Noel Butler wrote:
Sounds like a package manager problem to me
I'm not sure of that, but I'm not a php expert :( Just been doing
some testing on the sandbox (dpkg --force-all, not apt), and it comes
back to
At 12:05 PM 3/30/2013 +1000, Noel Butler wrote:
Sounds like a package manager problem to me
I'm not sure of that, but I'm not a php expert :( Just been doing some
testing on the sandbox (dpkg --force-all, not apt), and it comes back to
php lack of thread safety. Blowfish encryptation
At 07:11 PM 3/28/2013 -0400, Eric Covener wrote:
[snip]
mod_authnz_ldap requires HTTP Basic Authentication, which doesn't have
any provision to encrypt the password separately from the rest of the
connection.
mod_authnz_ldap doesn't work with Digest authentication -- I don't think
it can.
Sounds like a package manager problem to me
On Fri, 2013-03-29 at 19:30 -0400, Stormy wrote:
At 07:11 PM 3/28/2013 -0400, Eric Covener wrote:
[snip]
mod_authnz_ldap requires HTTP Basic Authentication, which doesn't have
any provision to encrypt the password separately from the rest of the
Hi -
I've searched the archives and it looks like this was discussed back in
2010 with a WONTFIX. I just wanted to make sure this is still the case.
Basically, using the mod_auth_ldap module, apart from using SSL (and
associated overhead), is it still the case that there is no way to
On Thu, Mar 28, 2013 at 5:33 PM, Ken Nishimura
ken_nishim...@agilent.com wrote:
Basically, using the mod_auth_ldap module, apart from using SSL (and
associated overhead), is it still the case that there is no way to encrypt
just the passing of username and password from the client (browser)
Eric -
I'm not exactly sure what your last question means. However, I think
you answered my question. In short, the situation has not changed. If
we want to ensure that the password is passed from the client (browser)
to the server securely (to be further passed on to the LDAP server), we
