Hello all

Is it possible to encrypt password provided for the ldap-login-password attribute in the ASA configuration? Our auditor is not comfortable with the LDAP (AD) password appearing in clear text in the configuration


cheers.

I think we just used an "adreader" account that literally only has access to crawl the AD and nothing else But I'd like to know myself.

_________________
The best part about telling UDP jokes is I don't really care if you get them or not.

Yeah, it's not possible to encrypt it. I, like Axis, use a very limited account for LDAP authentication, and you should as well. There are only a few privileges it needs.

_________________
Reasonably un-nerdy blog:
americanwerewolfinbelgrade.wordpress.com/

ditto...i try to make it (the password) look like an md5 hash too...just so the occasional passerby cant read it.

Just saw that if your running 8.3 there is a 'master passphrase' that you can set to encrypt your "in config" passwords.

key config-key password-encryption <key>

Nice, that's pretty cool, didn't know about that one.

_________________
Reasonably un-nerdy blog:
americanwerewolfinbelgrade.wordpress.com/

Wow ya, I didn't know about that one either...you'd think there would be more info about it since it's a pretty nice update

_________________
The best part about telling UDP jokes is I don't really care if you get them or not.