would this still be the way of securing an OpenLDAP server on Debian 9 (Stretch) and 10 (Buster). See Section Securing LDAP Data Exchanges. Unfortunately the Debian manual seems to always be a few distros behind. Although its a home network, I'm still no keen on having passwords traveling in clear between hosts.

1 Answer 1


Yes. Always use TLS to secure data transmitted and let the client authenticate the server to which it sends credentials.

Yes. The section Securing LDAP Data Exchanges seems to be sufficient to properly configure TLS. You should consider to automate things especially for certificate and key renewal.

  • Thanks for your reply Michael. I guess my question was whether the above guide was applicable to Debian Buster? Apologies for not wording the question correctly.
    – MiniTux
    Commented Apr 16, 2020 at 7:43
  • Edit my answer. Commented Apr 16, 2020 at 19:43

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .