Home/ Questions/Q 7938345
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-03T22:47:14+00:00

I’m building a Haskell web application for which I need authentication. My organization runs

  • 0

I’m building a Haskell web application for which I need authentication. My organization runs an LDAP server, and I would prefer not to reinvent the wheel. However, when I inspect the source code for LDAP.Init.ldapSimpleBind from the ldap-haskell package, I discover that it calls the C routine ldap_simple_bind_s. As far as I can tell, this API call is going to send my users’ passwords in the clear to an LDAP server. Not acceptable.

  • Have I understood correctly what ldap-haskell is doing?

  • If so, is there a secure way for me to authenticate my users to an LDAP server from an application written in Haskell?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Passwords must be sent in the clear over a secure connection to an LDAP server that supports password policy checks. Failure to do so will result in the server being unable to manage password history and password quality checks. If the server does not support password policy and history checks, then that server should not be used for non-trivial, mission critical applications. Use either SSL, or failing that, an unsecure connection promoted to TLS using the StartTLS extended operation.

    • 0