Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 11-05-2007, Руководство по установке

Страница: 696 / 982

2 With Log Level Settings, configure the degree of logging activity (verbosity) of
the LDAP server. From the predefined list, select or deselect the logging options
according to your needs. The more options are enabled, the larger your log files
grow.
3 Determine the connection types the LDAP server should allow. Choose from:
bind_v2
This option enables connection requests (bind requests) from clients using
the previous version of the protocol (LDAPv2).
bind_anon_cred
Normally the LDAP server denies any authentication attempts with empty
credentials (DN or password). Enabling this option, however, makes it pos-
sible to connect with a password and no DN to establish an anonymous
connection.
bind_anon_dn
Enabling this option makes it possible to connect without authentication
(anonymously) using a DN but no password.
update_anon
Enabling this option allows nonauthenticated (anonymous) update operations.
Access is restricted according to ACLs and other rules (see
Section 36.3.1,
“Global Directives in slapd.conf” (page 666)).
4 To configure secure communication between client and server, proceed with TLS
Settings:
4a Set TLS Active to Yes to enable TLS and SSL encryption of the client/server
communication.
4b
Click Select Certificate and determine how to obtain a valid certificate.
Choose Import Certificate (import certificate from external source) or Use
Common Server Certificate (use the certificate created during installation).
• If you opted for importing a certificate, YaST prompts you to specify
the exact path to its location.
• If you opted for using the common server certificate and it has not been
created during installation, it is subsequently created.
678 Installation and Administration