[SOGo] security among application components

Steve Ingram sogo@opengroupware.org
Sat, 29 Dec 2007 16:49:34 -0800


Having now gotten SOGo working, I'm attempting to ensure reasonable security among the various components of the application. In my mind one of the biggest advantages of SOGo over other solutions is the ability to install each of the components (say openldap, cyrus-imap, SOPE application server) on different servers and then setup SSL communications among them to minimize the chance of unauthorized access. Obviously cyrus-imap, openldap and most MTAs offer a way to use SSL. However, looking at how the application server communicates with PostgreSQL for data storage, or openldap for authentication, I can't figure out how to ensure that this communication is encrypted using SSL. I've tried several different changes to the GNUstepDefaults file (i.e. change LDAP port to 636) without success. Is there a way to make this happen?

Steve