[Fedora-directory-users] SSL/TLS vs SASL in Directory Server solution

[David Boreham]

Kenneth Holter wrote:
> The DS supports both TLS and SASL. TLS can be used for both 
> authentication and encryption, and should therefore cover our security 
> needs.
>  
> SASL is quite new to me, and as of now I don't see the benefit of 
> using it. Which security or functionality features does SASL provide 
> that TLS doesn't? I know that SASL enables integration with Kerberos, 
> but we're most likely not going for a Kerberos based solution.
>  
SASL is primarily needed to support Kerberos clients.
Use TLS unless you already know that you want SASL for some reason.