[nflug] openldap

[JJ Neff]

LDAP as a directory can be used to HOST SO MUCH information - the most common anonymous bind data is address book data.

If you want anyone to be able to look up Name, e-mail, phone number and other Public data then that data will normally be sent from the LDAP server to any Client that connects and searches.

Then any other data (address, password, job description, personal info) can be secured for authorized users who present the proper credentials.

MANY Directory software products (Domino, Active Directory) that have an LDAP server built in will have some public data available to anonymous so always search your LDAP server with a non- autheticated client and see what it gives back.  All these settings can be changed but the location to change it is different for each piece of software.  Of course OpenLdap and other LDAP servers will tend to use the same config files.  (Many Directory server products are really Open Ldap under the hood e.g. Tivoli Directory Server).

JJN
Formerly of IBM now with PayPal.


----- Original Message ----
From: Eric Benoit <eric at bootz.us>
To: nflug at nflug.org
Sent: Wednesday, November 19, 2008 9:23:02 AM
Subject: [nflug] openldap

:) so many questions, wish I could take a class.

I'm trying to get a handle on the most common way to connect to an openldap server anonymously.

do most clients require the use of sasl or tls even when it's an anonymous bind?
_______________________________________________
nflug mailing list
nflug at nflug.org
http://www.nflug.org/mailman/listinfo/nflug