From c64d28aa4e5faaaead5b81b359f8a23ea85338b5 Mon Sep 17 00:00:00 2001
From: Kurt Zeilenga <kurt@openldap.org>
Date: Sat, 12 Oct 2002 05:10:41 +0000
Subject: [PATCH] correct security sample

---
 servers/slapd/slapd.conf | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/servers/slapd/slapd.conf b/servers/slapd/slapd.conf
index 91dab7bdb0..0c39145cde 100644
--- a/servers/slapd/slapd.conf
+++ b/servers/slapd/slapd.conf
@@ -28,8 +28,9 @@ argsfile	%LOCALSTATEDIR%/slapd.args
 # disallow bind_simple_unprotected
 #
 #	Require integrity protection (prevent hijacking)
-#	Require 112-bit (3DES or better) encryption
-# security ssf=1 ssf=112
+#	Require 112-bit (3DES or better) encryption for updates
+#	Require 63-bit encryption for simple bind
+# security ssf=1 update_ssf=112 simple_bind=64
 
 # Sample access control policy:
 #	Allow read access of root DSE