Login to LDAP? 1

[dan]

I have downloaded the LDAPManager.exe program from Novell and can connect via anonymous connection. However, If I try any login (including admin) I get the message, "Unable to connect to LDAP server. Confidentiality is required for this operation." We do not have an SSL server on the box. Does it mean that one is required?
Dan

 

[marvhuffaker]

That error means that you can't login with clear text. You would either need to configure the LDAP to allow clear text, or use SSL from your LDAP application when trying to connect.

Marvin Huffaker, MCNE

http://www.redjuju.com

 

[dan]

Would you have any idea how I can configure LDAP to allow clear text?
Dan

 

[marvhuffaker]

Understand that when you allow clear text, you are severely crippling the security of your system. All accounts and passwords are sent in clear text and is not recommended unless you have a specific reason to do so, and you can be pretty confident the information will never be compromised.

Where you say you are using an anonymous ldap login, you should use an LDAP proxy user with no password, that has some very basic rights to the tree, such as browse and read (and only on specific pieces you want people to have access to). This will help minimize the risk. Don't use an ADMIN user for the LDAP proxy. That will be suicide.

You need to go into ConsoleOne and find the LDAP server and LDAP Group objects for the server you are authenticating LDAP to. There are properties on both that control whether Clear text is allows. You'll want to clear any options that say "Require TLS" and then also check "allow clear text". I can't recall specifically which options are on which objects.



Marvin Huffaker, MCNE

http://www.redjuju.com

 

[dan]

Thanks for your help. I will probably set up TLS eventually. I am just trying to get it to work for now.
Dan