Red Hat DIRECTORY SERVER 8.0 Command Reference Manual page 187

Required or Optional
Optional
Table 6.7. Description of DIGEST-MD5 SASL Mechanism Options
Required or Optional
Required
Option
secprop=value
Option
mech=GSSAPI
Description
The secprop attribute
sets the security
properties for the
connection. The
secprop value can be
any of the following:
• None
• noplain — Do not
permit mechanisms
susceptible to simple
passive attack.
• noanonymous
— Do not permit
mechanisms that
allow anonymous
access.
• minssf — Require
a minimum security
strength; this option
needs a numeric
value specifying
bits of encryption. A
value of - 1 means
integrity is provided
without privacy.
• maxssf — Require
a maximum security
strength; this option
needs a numeric
value specifying
bits of encryption. A
value of - 1 means
integrity is provided
without privacy. The
maximum value is
128.
Description
Gives the SASL
mechanism.
NOTE
Have the
Kerberos
ldapsearch
Example
-o
"secprop=noplain,noanonymous,
maxssf=128,minssf=128"
Example
-o "mech=GSSAPI"
177