Disable Anonymous LDAP on Admin Console

[gbatty1]

Hi All,

Has anybody made a change to disable the anonymous ldap access to the admin console? Wondering if you have disabled anonymous access the same as you would a normal eDirectory instance for example?

Cheers,
GB

[aburgemeister]

I have not, but I am pretty sure it would be fine. I have never seen a
NAM component that works without authentication, so using the standard
ldapconfig command to change this would probably be safe. Of course,
testing outside of production first is a good idea. Submitting an
enhancement to have that be the default is probably not a bad idea either.
The principle of Defense in Depth would also recommend blocking access to
the LDAP and LDAPS ports outside of the NAM systems themselves, which I
already do, so somebody needs to actually be on one of those to try to
access the Admin Console in any way.


--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.