From 2fd41add7094edaab2c8573dee5c0a8527798e64 Mon Sep 17 00:00:00 2001 From: Kurt Zeilenga Date: Tue, 8 Oct 2002 01:07:12 +0000 Subject: [PATCH] Clarify unprotected simple bind settings --- doc/guide/admin/security.sdf | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/doc/guide/admin/security.sdf b/doc/guide/admin/security.sdf index e4848a6a1d..a3cf12caf9 100644 --- a/doc/guide/admin/security.sdf +++ b/doc/guide/admin/security.sdf @@ -146,6 +146,11 @@ is protected by other means (e.g., TLS, {{TERM:IPSEC}}). Where the administrator relies on TLS to protect the password, it is recommended that unprotected authentication be disabled. This is done by setting "{{EX:disallow bind_simple_unprotected}}" in {{slapd.conf}}(5). +The level of confidential protection to require can be adjusted +using the {{overall}} security strength factor using the {EX:security}} +directive. If this factor is not set (or set to integrity only), +any confidentiality protection is sufficient. + The user/password authenticated bind mechanism can be completely disabled by setting "{{EX:disallow bind_simple}}". -- 2.39.5