Secure ldap authentication

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
sandeepatil
Posts: 211
Joined: Tue Dec 27, 2016 3:12 am

Secure ldap authentication

Post by sandeepatil »

We have configured ldap authentication in nagios core with "AuthType Basic", but this communicate with ldap with plane text password and this is security breach.

Need you help to configure secure ldap authentication.
User avatar
cdienger
Support Tech
Posts: 5045
Joined: Tue Feb 07, 2017 11:26 am

Re: Secure ldap authentication

Post by cdienger »

https://httpd.apache.org/docs/2.4/mod/m ... _ldap.html suggests using ldaps:// instead of ldap:// in the configuration to secure the connection. Please review this page and provide a copy of your configuration if you need further assistance.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
sandeepatil
Posts: 211
Joined: Tue Dec 27, 2016 3:12 am

Re: Secure ldap authentication

Post by sandeepatil »

For secure LDAP authentication configuration require ssl certificate ?
User avatar
cdienger
Support Tech
Posts: 5045
Joined: Tue Feb 07, 2017 11:26 am

Re: Secure ldap authentication

Post by cdienger »

Usually not for the Core server, but it all depends on the ldap configuration. You may need to use these directives:

https://httpd.apache.org/docs/2.4/mod/m ... clientcert
https://httpd.apache.org/docs/2.4/mod/m ... globalcert
https://httpd.apache.org/docs/2.4/mod/m ... rustedmode
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Locked