Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I need to encrypt the bindpw on the ldap.conf. Currently the password for the CN is clear text.

I am running this on Red Hat Enterprise Linux ES release 4 (Nahant Update 8) 64 bit.

Any suggestion/feedback appreciated.

share|improve this question

2 Answers 2

up vote 0 down vote accepted

I don't think this is possible.

The LDAP client tools require to know what the password is in order to bind. You would need to use some form of reversible encryption, like AES, and AFAIK the LDAP tools can't do that.

If you're a good programmer (or know one) you could modify the client tools source code to include AES encryption.

share|improve this answer

To prevent it from being read by other users? The bindpw file is supposed to be only readable by root. Normal users use their own credentials to bind to LDAP.

To prevent it from being stored on disk? Move ldap.conf to a eCryptFS or EncFS filesystem.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.