Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Received-SPF: pass (athena.apache.org: domain of pajbam@gmail.com designates
 74.125.82.44 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=sender:content-type:mime-version:subject:from:in-reply-to:date
         :content-transfer-encoding:message-id:references:to:x-mailer;
        b=c2fU50BKjeKFnvtCIqaY3In59Kmhq2XDc5bb5avrMRhnybpYreUZ408Uy8wk1Vidip
         79OL1LFSLIyFT1HPXbH4To8J5G3R/nustCc1qVthuh4XyvehnAUTgeC3pb/NezGFx44U
         lkBKIYQjdy6juM10akVSg+HgXpVtcLOWi0x1o=
Sender: Pierre-Arnaud Marcelot <pajbam@gmail.com>
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1081)
Subject: Re: [ApacheDS] Enablement of LDAPS (SSL) Service in ApacheDS 2.0
 configuration
From: Pierre-Arnaud Marcelot <pa@marcelot.net>
In-Reply-To: <4CEA7EA6.8010603@gmail.com>
Date: Mon, 22 Nov 2010 15:37:12 +0100
Content-Transfer-Encoding: quoted-printable
Message-Id: <A445A7BC-A880-482F-A2EF-0BCE57F623C2@marcelot.net>
References: <6AABB0C6-5237-4270-BF11-0EF0B5542A9B@marcelot.net>
 <4CEA7EA6.8010603@gmail.com>
To: "Apache Directory Developers List" <dev@directory.apache.org>

Hi Emmanuel,

On 22 nov. 2010, at 15:31, Emmanuel Lecharny wrote:

> On 11/22/10 3:17 PM, Pierre-Arnaud Marcelot wrote:
>> Hi Dev,
>>=20
>> A quick question, while I'm writing the configuration editor for =
ApacheDS 2.0 configuration.
>>=20
>> LDAP and LDAPS servers configuration is shared in the =
'ads-serverId=3DldapServer,ou=3Dservers,ads-directoryServiceId=3Ddefault,o=
u=3Dconfig' entry.
>> Like other servers (Kerberos, ChangePassword, HTTP, etc.), this entry =
has a 'ads-enabled' attribute.
>> But how do I know which servers (LDAP and/org LDAPS) should be =
enabled?
>>=20
>> Should I look at the enablement of the transports to see which ones =
are enabled? Should we add a specific 'ads-enable-ldaps' attribute to =
the LDAP Server configuration?
>>=20
>> WDYT ?
> IMO, if the SSL transport is present, then LDAPS should be enabled. No =
need for an extra flag.

I agree with this (transport being present and enabled).

But I propose we make this a consistent behavior all across the servers
In that case, how about removing the 'ads-enable' attribute from the =
servers entries and look for the value in the transport ?

Thanks,
Pierre-Arnaud