[nflug] LDAP ssl

[Darin Perusich]

Self signed certificates for use within your infrastructure are fine 
though when you start creating them on all of your servers the 
management of this gets messy. You may want to think about creating a CA 
  for internal use and create all your cert/key pairs for you servers 
from that system. Take a look at TinyCA2, it's a nice little GUI tool 
for managing your own CA.

http://tinyca.sm-zone.net/

eric wrote:
> David,
> 
> 
> I have a question for you about  an openLDAP server I created, do you 
> think a selfsigned ssl is ok to use within an intranet containing only 
> one subnet.  The only thing I'm concerned about in my very small network 
> is snooping on passwords in transit... I'm not especially worried about 
> man in the middle.
> 

-- 
Darin Perusich
Unix Systems Administrator
Cognigen Corporation
395 Youngs Rd.
Williamsville, NY 14221
Phone: 716-633-3463
Email: darinper at cognigencorp.com