<div>Thank you for the quick reply.</div>
<div> </div>
<div>We're going for the TLS based solution. However, I'd like a better understanding of SASL, so let me post these questions:</div>
<ul>
<li>What can SASL be used for besides Kerberos integration? The RHDS documentation says that TLS can be used as an authentication mechanism, but doesn't provide much details. </li>
<li>How can I check if SASL is enabled on my LDAP server (RHDS)?</li></ul>
<div><span class="gmail_quote"></span> </div>
<div><span class="gmail_quote">On 5/13/08, <b class="gmail_sendername">David Boreham</b> <<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:david_list@boreham.org" target="_blank">david_list@boreham.org</a>> wrote:</span> </div>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid"><span>Kenneth Holter wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px; BORDER-LEFT: #ccc 1px solid">The DS supports both TLS and SASL. TLS can be used for both authentication and encryption, and should therefore cover our security needs.<br>
SASL is quite new to me, and as of now I don't see the benefit of using it. Which security or functionality features does SASL provide that TLS doesn't? I know that SASL enables integration with Kerberos, but we're most likely not going for a Kerberos based solution.<br>
<br></blockquote></span>SASL is primarily needed to support Kerberos clients.<br>Use TLS unless you already know that you want SASL for some reason.<br><span><br><br><br><br>--<br>Fedora-directory-users mailing list<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:Fedora-directory-users@redhat.com" target="_blank">Fedora-directory-users@redhat.com</a><br>
<a onclick="return top.js.OpenExtLink(window,event,this)" href="https://www.redhat.com/mailman/listinfo/fedora-directory-users" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-directory-users</a><br></span></blockquote>
<br>