From: Kurt Zeilenga <kurt@openldap.org>
Date: Tue, 8 Oct 2002 01:07:12 +0000 (+0000)
Subject: Clarify unprotected simple bind settings
X-Git-Tag: NO_SLAP_OP_BLOCKS~917
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=2fd41add7094edaab2c8573dee5c0a8527798e64;p=openldap

Clarify unprotected simple bind settings
---

diff --git a/doc/guide/admin/security.sdf b/doc/guide/admin/security.sdf
index e4848a6a1d..a3cf12caf9 100644
--- a/doc/guide/admin/security.sdf
+++ b/doc/guide/admin/security.sdf
@@ -146,6 +146,11 @@ is protected by other means (e.g., TLS, {{TERM:IPSEC}}).  Where the
 administrator relies on TLS to protect the password, it is recommended
 that unprotected authentication be disabled.  This is done by setting
 "{{EX:disallow bind_simple_unprotected}}" in {{slapd.conf}}(5).
+The level of confidential protection to require can be adjusted
+using the {{overall}} security strength factor using the {EX:security}}
+directive.  If this factor is not set (or set to integrity only),
+any confidentiality protection is sufficient.
+
 The user/password authenticated bind mechanism can be completely
 disabled by setting "{{EX:disallow bind_simple}}".