In an effort not unlike that described by andrina in this article, I’m attempting to have some outsourced services authenticate against my Open Directory. I have a pretty standard master-replica installation without a lot of tweaks to it, but want the external services to be secure.
I have turned on SSL (not allowing insecure connections outside the firewall) following instructions here, and have looked at the 10.3 article on DACs which seems to still apply.
Based on what I see, I think I can do this without causing problems to my clients. Is this the right track to be on, or am I missing something in the approach?