Best OpenLDAP Authentication Option?

I want to prevent users from viewing other usernames, security (of course) and performance

0


source to share


1 answer


Use Maching / Network permissions to restrict access to your openLDAP server ONLY to your management machine and your IIS machine. Thus, only those two machines can view your directories.

Use SSL for all communication with your openLDAP server. This will require a connection to port 636.



By default, openLDAP stores passwords in a mailbox; instead force it to use a salted hash. OpenLDAP comes with a command line utility that will use hash passwords for you.

-1


source







All Articles