There are a plain password store in mod_ldap. Is there any way to encrypt the password?
AuthLDAPBindPassword password
Thank You.
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
No, because even if it’s encrypted, something eventually has to decrypt it in order to actually use it to bind to the ldap server. If somebody is able to read that file, then it’s pretty likely they’ll be able to decrypt it using the same mechanism that apache would eventually have to use.
You should set the permissions on the file so that it’s only readable by the apache user.