Re: ldap urls

[wiLL <wol...@sk...>]

I tried to eliminate anonymous searches on my server , but it doesnt seem
to like it ..
the slapd daemon wont run if i put the ff. on my slapd.conf file, there
arent any error messages though , is this correct ?...

------------
:
:
database ldbm
suffix          "o=mycom, c=PH"
rootdn          "uid=Manager, o=mycom, c=PH"
# database directory  
# this directory MUST exist prior to running slapd AND
# should only be accessable by the slapd/tools  Mode 700 recommended.
directory       /usr/local/var/openldap-ldbm
access to *                          
        by self write
        by anonymous none

:
:
--------------------------------



At 11:09 PM 8/16/00 , Jim Harle wrote:
>LDAP URLS basically just say "use the LDAP protocol to get some
>information".  You need to deal with the general issue of LDAP access to
>your server.  For example, we block access to that port at our router,
>except for holes opened to 2 specific ports.  Your server may have some
>type of control available also.
>  --Jim Harle
>
>
>On Wed, 16 Aug 2000, Mark Wilcox wrote:
>
>> Nobody (at least that I know of) supports authenticated operations via
>> LDAP URLs. Just eliminate anonymous searches to your server and that will
>> prevent LDAP URLs.
>> 
>> Mark
>> 
>> On Wed, 16 Aug 2000, wiLL wrote:
>> 
>> > 
>> > I've been working with binding usernames with their corresponding
paswd in
>> > the LDAP tree, but this is just when a user would access a particular
http
>> > directory ... I just realized I needed also to restrict ldap urls from
>> > being accessed by anyone .. Does anybody knows how this one goes?
>> > 
>> > will
>> > 
>> > -------------------------------------
>> > wiLL S. Olivete Jr.
>> > wol...@sk...
>> > pgp key id : 0x2D85D7BF
>> > office voice: 63.74.443.5657
>> > mobile: 0917.972.6384
>> > pager: ec 963576 
>> > 
>> > 
>> 
>> 
>> 
> 

-------------------------------------
wiLL S. Olivete Jr.
wol...@sk...
pgp key id : 0x2D85D7BF
office voice: 63.74.443.5657
mobile: 0917.972.6384
pager: ec 963576