[DIRSERVER-1617] Add a feture to support TLS in DelegatingAuthenticator

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.5.7
• Fix Version/s: 2.0.0-M13
• Assignee: Unassigned
• Reporter: Kiran Ayyagari
• Created: 16/May/11 20:21
• Updated: 20/Jun/13 10:12
• Resolved: 17/May/13 11:31

Description

Current implementation of DelegatingAuthenticator uses plain socket connection which makes it vulnerable to MITM attacks.
It will be good to setup TLS (using startTLS extended operation) after establishing a connection.

We should also add a configuration option to selectively turn on/off this option with a new attributetype named like 'useTLS'
in the 'ads-delegatingAuthenticator' objectclass.