Page 1 of 1

Secure ldap authentication

Posted: Mon Jul 15, 2019 6:31 am
by sandeepatil
We have configured ldap authentication in nagios core with "AuthType Basic", but this communicate with ldap with plane text password and this is security breach.

Need you help to configure secure ldap authentication.

Re: Secure ldap authentication

Posted: Mon Jul 15, 2019 3:23 pm
by cdienger
https://httpd.apache.org/docs/2.4/mod/m ... _ldap.html suggests using ldaps:// instead of ldap:// in the configuration to secure the connection. Please review this page and provide a copy of your configuration if you need further assistance.

Re: Secure ldap authentication

Posted: Thu Jul 18, 2019 12:30 am
by sandeepatil
For secure LDAP authentication configuration require ssl certificate ?

Re: Secure ldap authentication

Posted: Thu Jul 18, 2019 2:39 pm
by cdienger
Usually not for the Core server, but it all depends on the ldap configuration. You may need to use these directives:

https://httpd.apache.org/docs/2.4/mod/m ... clientcert
https://httpd.apache.org/docs/2.4/mod/m ... globalcert
https://httpd.apache.org/docs/2.4/mod/m ... rustedmode