[SSSD] [PATCH] Add option to disable TLS for LDAP auth

Stephen Gallagher sgallagh at redhat.com
Tue Jan 25 19:55:05 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/25/2011 11:17 AM, Sumit Bose wrote:
> On Tue, Jan 25, 2011 at 11:09:09AM -0500, Stephen Gallagher wrote:
> On 01/25/2011 10:59 AM, Jeff Schroeder wrote:
>>>> Why don't you make sssd also complain on startup about this option?
>>>>
> 
> I'm trying not to be TOO obnoxious about it. I figured that not having
> it mentioned in the documentation and not visible to the SSSDConfig API
> would be sufficient.
> 
> But if you feel strongly about it, it's not too hard to add.
> 
> 
>> I would also support the idea of some kind of warning message to prevent
>> that someone accidentally use the "debugging" configuration in
>> production. But instead of a message at startup I would prefer a syslog
>> message every time a password is sent unencrypted.


New patch with annoying syslog message attached.


- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk0/KpkACgkQeiVVYja6o6OsUQCfUASv3Xl4TmAe2Hg4ahO0NkrG
vSsAnRkS32L5QrsqXAb0YSRRNtY2QXwH
=i5b6
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-option-to-disable-TLS-for-LDAP-auth.patch
Type: text/x-patch
Size: 5164 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110125/1723c97c/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-option-to-disable-TLS-for-LDAP-auth.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110125/1723c97c/attachment.sig>


More information about the sssd-devel mailing list