All Questions
5 questions
11
votes
3
answers
32k
views
Safe to expose Active Directory via LDAPS externally?
We currently access Active Directory via LDAPS internally for authentication and user data retrieval. Is it common, or safe, to expose this publicly over LDAPs?
Addendum 1:
Our business case, ...
3
votes
2
answers
6k
views
LDAP Security problems?
I have installed many Active Directory (AD) based networks and have applied various standard security templates based on best practices, however I have never really looked at LDAP on a deeper level ...
3
votes
2
answers
9k
views
LDAP Authentication and Sessions
Given a Web Application with Form-based login and a central directory: using LDAP (fast) bind in an application with the actual user has a number of advantages (opposed to using a service user and ...
1
vote
0
answers
251
views
How to intercept AD authentication attempts [closed]
My work Windows account keeps locking and the unlocking process is frustrating (you have to call the HelpDesk to request them account unlocking). They don't have any type of log and so they can't help ...
0
votes
1
answer
2k
views
Perfect DMZ: LDAP auth to AD
My goal is to integrate a public facing service with AD using LDAP.
While I vouch for federated approach to user authentication, the business dictates LDAP.
We run a DMZ subnet and I insist on not ...