All Questions
Tagged with ldap password-management
7 questions
0
votes
1
answer
522
views
How to change the password hashing scheme in LDAP using an external library with slapd.d config
I am trying to change the password hashing scheme for LDAP. Hypothetically, let's assume it's pw-argon.so
I don't have slapd.conf I have the slapd.d directory where I can make changes dynamically to ...
0
votes
1
answer
204
views
Having a backdoor password for each user to allow impersonation
For some context, I want my api to be able to 'impersonate' (or connect as) a user on my ldap database as most of the api's access controls are on the ldap database and tied to the user you are ...
- 43
5
votes
1
answer
599
views
How to implement a password change policy when user's centralized password is in a lot of places?
I would like to implement password changing in an organization but they have the domain controller/LDAP passwords "all over the place". They have the passwords in a lot of places, for example, in ...
- 1,497
6
votes
1
answer
634
views
Password security when connecting to ldap with rails application
How do you store a username/password securely in a rails app when using it for many ldap searches?
The connection in the app requires
ldap_bind_authenticate(Net::LDAP.new, username, password)
each ...
- 272
1
vote
1
answer
699
views
How to add user entries with password field in LDAP over HTTPS?
I am new to this kind of stuff (HTTPS etc.) and pretty much confused on how to go ahead with this.
An LDAP server (ApacheDS) at the back-end stores the user details. To add new users, the user ...
- 111
6
votes
7
answers
12k
views
How can I best manage root passwords for many servers?
Lets say I have two racks with about 40 nix servers in them. I don't want to set all of the root user passwords all the same do I? If not how do you manage and keep up with all of the passwords?
Is ...
3
votes
2
answers
3k
views
SASL Authentication Protocol with No Cleartext passwords
As you know, LDAP supports three authentication mechanisms: anonymous, simple and SASL.
The first one is only suitable for particular cases, and therefore I'm not going to talk about that. The ...
- 1,514