All Questions
Tagged with ldap authentication
20 questions
0
votes
1
answer
2k
views
Perfect DMZ: LDAP auth to AD
My goal is to integrate a public facing service with AD using LDAP.
While I vouch for federated approach to user authentication, the business dictates LDAP.
We run a DMZ subnet and I insist on not ...
- 281
3
votes
2
answers
1k
views
User authentication: In HTTP Server vs. in Web Application
Management decided to switch the authentication-backend from LDAP to Kerberos as LDAP is deemed "obsolete and insecure". Also they want to switch from Apache to nginx for "performance ...
- 140
1
vote
1
answer
150
views
Is an LDAP injection possible for a basic search query?
I'm trying to secure a login endpoint by attempting to bypass the login that uses LDAP.
It employs a search query of "cn=" + username + ", dc=example, dc=com" with a filter of "(objectClass=*)".
Is ...
- 113
2
votes
2
answers
396
views
For PCI compliance, is a central Auth required for domain and non-domain security principles?
We have a Saas offering that is hosted within our own data centers. Our software offering utilizes OpenLDAP as it backing for token auth security. Our operations team has asserted that for PCI ...
- 21
2
votes
3
answers
727
views
Best practices to prevent logging of LDAP credentials by intermediate apps
I am working on transitioning our project management tool (PMT) to use LDAP authentication instead of native auth that's currently in use.
We also have some internal web-based tools that interface ...
- 21
1
vote
0
answers
251
views
How to intercept AD authentication attempts [closed]
My work Windows account keeps locking and the unlocking process is frustrating (you have to call the HelpDesk to request them account unlocking). They don't have any type of log and so they can't help ...
- 111
2
votes
1
answer
1k
views
Using LDAP for application authentication
Some of my colleagues want to get rid of our current inhouse application authentication, and use LDAPS to handle all of the authentication (storing passwords etc.) instead. I disagree and say that we ...
user127507
28
votes
2
answers
59k
views
Kerberos vs. LDAP for authentication -- which one is more secure
Can anyone describe/outline the relative merits of using Kerberos or LDAP for authentication in a large heterogeneous environment?
And
Can we switch between them transparently?
- 1,612
21
votes
3
answers
454
views
What precautions should I take when creating users that will be used by applications and not by people?
I have some applications that need to access to a webservices bus. Own applications that access to the bus authenticate using a webservice on that bus but in this case I need that third party ...
- 1,497
2
votes
1
answer
557
views
In postgres LDAP authentication, are passwords encrypted?
I am wondering if postgres LDAP login is secure? Would passwords be transmitted in clear text potentially if this is not set up properly?
- 175
5
votes
1
answer
3k
views
How does LDAP keep an authenticated session
I feel like I'm missing something, because I'm not finding an answer
Let's have a pretend scenario.
I connect to an LDAP server
I issues a BIND command and successfully log in
(I think the sever ...
- 153
3
votes
2
answers
9k
views
LDAP Authentication and Sessions
Given a Web Application with Form-based login and a central directory: using LDAP (fast) bind in an application with the actual user has a number of advantages (opposed to using a service user and ...
- 983
3
votes
1
answer
583
views
Kerberos Authorization host/service by host/service basis
I understand that Kerberos is for Authentication not Authorization, but Is it possible to get Kerberos to refuse to Authenticate certain users on specific hosts? I am currently using LDAP for /etc/...
- 151
2
votes
1
answer
8k
views
How to test ldap that authenticates with kerberos
I want to test an ldap directory with ldapsearch. No passwords are stored in the LDAP directory. Account passwords are stored in Kerberos and LDAP contains a pointer to the Kerberos principal. The ...
- 121
1
vote
1
answer
699
views
How to add user entries with password field in LDAP over HTTPS?
I am new to this kind of stuff (HTTPS etc.) and pretty much confused on how to go ahead with this.
An LDAP server (ApacheDS) at the back-end stores the user details. To add new users, the user ...
- 111
0
votes
1
answer
202
views
How to sync with multiple authentication services?
I have a peculiar case to work on. We are using a proprietary product which supports LDAP integration.
However, it can be configured to use only one LDAP service. (most of the products are shipped ...
- 125
11
votes
3
answers
32k
views
Safe to expose Active Directory via LDAPS externally?
We currently access Active Directory via LDAPS internally for authentication and user data retrieval. Is it common, or safe, to expose this publicly over LDAPs?
Addendum 1:
Our business case, ...
- 535
6
votes
7
answers
12k
views
How can I best manage root passwords for many servers?
Lets say I have two racks with about 40 nix servers in them. I don't want to set all of the root user passwords all the same do I? If not how do you manage and keep up with all of the passwords?
Is ...
3
votes
2
answers
3k
views
SASL Authentication Protocol with No Cleartext passwords
As you know, LDAP supports three authentication mechanisms: anonymous, simple and SASL.
The first one is only suitable for particular cases, and therefore I'm not going to talk about that. The ...
- 1,514
3
votes
2
answers
6k
views
LDAP Security problems?
I have installed many Active Directory (AD) based networks and have applied various standard security templates based on best practices, however I have never really looked at LDAP on a deeper level ...
- 161