[LUNI] Certificate rather than ldap.secret?

[David Ehle]

Howdy All,

Looking at setting up LDAP for on of my groups. Reading through howto's I
keep running into /etc/ldap.secret. The idea of having a clear text
password on all my clients that would allow anyone who steals a hard drive
to get all my passwords for the whole cluster of machines sounds horrible
to me.  I have found one blurb about using a certificate instead with RH
Enterprise 3.  Is there an LDAP expert out there who can point me in the
right direction in regards to setting up this method for Debian Sarge?

Thanks!

David.
--
David Ehle
Computing Systems Manager
CAPP CSRRI
rm 077
LS Bld. IIT Main Campus
Chicago IL 60616
ehle at iit.edu
312-567-3751