Configure Suite B mode in a client environment to secure
communications with a directory server in Suite B mode.
Before you begin
- Install the IBM® Security Verify
Directory client
package.
- Install GSKit, Version 8.0.55.31 or
later.
About this task
You can configure Suite B mode to 128 bit or 192-bit cryptographic
security level in a client environment.
Procedure
- Access the command line for your operating system.
- Set the LDAP_OPT_SUITEB_MODE variable
with a valid Suite B cryptographic security level.
Note: If
you run the bash shell on a Windows™ system,
you can follow the UNIX™ conventions.
- To set Suite B mode to 128-bit cryptographic security level:
| Platform | Run this command: |
|---|
| AIX® and Linux™ |
$export LDAP_OPT_SUITEB_MODE=128
|
| Windows |
c:\> set LDAP_OPT_SUITEB_MODE=128
|
- To set Suite B mode to 192-bit cryptographic security level:
| Platform | Run this command: |
|---|
| AIX and Linux |
$export LDAP_OPT_SUITEB_MODE=192
|
| Windows |
c:\> set LDAP_OPT_SUITEB_MODE=192
|
- Run the client utilities from the same console after you
configure Suite B mode.
For example:
export LDAP_OPT_SUITEB_MODE=128
idsldapsearch -h server.com -p secure_port -Z -K clientkey.kdb \
-P clientPWD -s base -b "" objectclass =* ibm-slapdSuiteBMode
ibm-slapdSuiteBMode=128