Configuring Ldap - Novell NETWARE 6-DOCUMENTATION Manual

Configuring LDAP

66
NetWare 6 Overview and Installation Guide
TCP and SSL port numbers can be configured for LDAP services. You can
also configure ports after the server installation using ConsoleOne.
The default setting for the Allow Cleartext Passwords option (unchecked)
disallows cleartext passwords, effectively disabling eDirectory user binds on
non-SSL connections. Any sent password, however, is received by the server
before the bind fails. Therefore, it is possible for an eDirectory username and
password to be captured during a failed bind attempt.
By default, only passwords exchanged over SSL connections are encrypted.
Checking Allow Cleartext Passwords lets requests that include passwords be
transmitted over nonencrypted connections. Nonencrypted passwords can be
captured by network monitoring equipment; therefore, depending on the
environment, clear text passwords can pose a security risk.