Security

Ask something
Discussion Locked

LDAP access security

0 helpful
2 replies

by mahesh_av

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have recently implemented a mail server architecture that uses LDAP for all the mail ids. We realised a problem that the administrators at the local mail servers can actually access the master directory in the central server and see all the mail ids present in it. We consider it a security issue open to spam. We need help in finding out is there are any access levels defined for LDAP that we can use and implement.

2 replies

by erikdr

AFIK, Access Control Lists (ACL's) are present in all serious LDAP servers but there are no LDAP standards for them.
So it's an implementation issue. Check about the options of your LDAP platform, if it does not have this stuff you might have to decouple mail server and LDAP and use a more advanced LDAP (including 'free' stuff like MS-ADS, Novell NDS and iPlanet Intranet LDAP).

- The Netherlands

by mahesh_av

Thanks Erik, but need to know if anything can be done on the current implementation that has been done on Linux.

This discussion is closed to new replies.