Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4343

Re: LDAP search without credetials

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

hi carsten,

On Fri, Aug 21, 2015 at 07:10:09AM +0200, Carsten Czerner wrote:
> I understand your points. But is it the best way to start with low security
> and hope that the administrator knows exactly what to do, like me ;)?
> 
> I thing its a better way to start with a strong security and adapt it to
> your
>  needs (make it less secure) when you need it. An LDAP server is like a
>  database for me, when you whant to access any kind of data you better
>  setup the permissions first.

I agree in general, the point I was just trying to make is not so much
one of "higher" or "lower" default security, but a trade-off between two 
problems: either having default access for everyone to data you may not
want them to have access to, or having to proliferate a high-value
password all over the place. choose your poison :)

regards  robert

-- 
Robert Lemmen                               http://www.semistable.com 

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

LDAP search without credetials Carsten Czerner <carsten.czerner@leuphana.de> - 2015-08-17 14:30 +0200
  Re: LDAP search without credetials Robert Lemmen <robertle@semistable.com> - 2015-08-19 17:40 +0200
    Re: LDAP search without credetials Carsten Czerner <carsten.czerner@leuphana.de> - 2015-08-21 07:20 +0200
      Re: LDAP search without credetials Robert Lemmen <robertle@semistable.com> - 2015-08-24 17:20 +0200

csiph-web