Kenneth Holter wrote:
The DS supports both TLS and SASL. TLS can be used for both
authentication and encryption, and should therefore cover our security
needs.
SASL is quite new to me, and as of now I don't see the benefit of
using it. Which security or functionality features does SASL provide
that TLS doesn't? I know that SASL enables integration with Kerberos,
but we're most likely not going for a Kerberos based solution.
SASL is primarily needed to support Kerberos clients.
Use TLS unless you already know that you want SASL for some reason.