Re: Ldap over SSL

[<mi...@st...>]

Sylvain Pereira wrote:
> 
> I am developping a python cgi application to administrate an ldap server for
> a customer.

What's the LDAP server product and OS?

> so the ldap requests should be encrypted thanks to SSL.

See Demo/initialize.py for various examples using LDAP over SSL (LDAPS) or 
StartTLS extended operation (RFC2830).

Note that there are also options to set for validating the server's cert 
against a trusted root cert and doing client cert/key for strong authentication:

ldap.set_option(ldap.OPT_X_TLS_CACERTFILE,tls_cacert_full_pathname)

ldap.set_option(ldap.OPT_X_TLS_CERTFILE,tls_client_cert_full_pathname)
ldap.set_option(ldap.OPT_X_TLS_KEYFILE,tls_client_key_full_pathname)

Ciao, Michael.