Best OpenLDAP Authentication Option?
I want to prevent users from viewing other usernames, security (of course) and performance
0
Walther contreras
source
to share
1 answer
Use Maching / Network permissions to restrict access to your openLDAP server ONLY to your management machine and your IIS machine. Thus, only those two machines can view your directories.
Use SSL for all communication with your openLDAP server. This will require a connection to port 636.
By default, openLDAP stores passwords in a mailbox; instead force it to use a salted hash. OpenLDAP comes with a command line utility that will use hash passwords for you.
-1
Alan
source
to share