Posts Tagged ‘LDAP Admin’
Potential leak of data: LDAP Admin
Detected 4 occurrence(s) of ‘CN\=Admin’:
er slapd[1057]: do (on the slave) e.fr Error, ldap_start_tls failed (-1) May 6 16:14:55 slave slapd[1278]: do_syncrepl: rid=003 rc -1 retrying (4 retries left) May 6 16:15:00 slave slapd[1278]: slap_client_connect: URI=ldap://master.beware.fr/ DN="cn=admin,cn=config" ldap_sasl_bind_s failed (-1) May 6 16:15:00 slave slapd[1278]: do_syncrepl: rid=001 rc -1 retrying (3 retries left) May 6 16:15:00 slave slapd[1278]: slap_client_connect: URI=ldap://master.beware.fr Error, ldap_start_tls failed (-1) May 6
Potential leak of data: Simple Password
Detected 2 occurrence(s) of ‘^\s*pass[word]+\s*[:=]+[ \t]*[a-z0-9\-_\!]+$’:
you need to adapt this path to the deployed file!! ######################################
source: /home/hegel/sites/ole_cas_server/authenticators/sql_devise.rb
database:
adapter: postgresql
database: eebos_development
username: postgres
password: sheril
server: localhost
schema_search_path: ole_core
user_table: ole_core.logins
username_column: username
password_column: encrypted_password
master_crypted: $2a$10$5ykb2mLN6EehQ3MxRgIRPe.DQKACvJRecDbr4gj1RPvRaQs2RBK4a
encryptor_options:
Detected 1 occurrence(s) of ‘CN\=Admin’:
authenticator # explanation above): # #authenticator: # class: CASServer::Authenticators::LDAP # ldap: # host: ldap.example.net # port: 636 # base: dc=example,dc=net # filter: (objectClass=person) # encryption: simple_tls # auth_user: cn=admin,dc=example,dc=net # auth_password: secret # # If you need additional data about the user passed to the client (for example, # their 'cn' and 'mail' attributes, you can specify the list of attributes # under the extra_attributes config option: # #authen
Potential leak of data: LDAP Admin
Detected 1 occurrence(s) of ‘CN\=Admin’:
CONTEXT_FACTORY,
"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://localhost:389/");
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL,
"CN=Admin,OU=System Accounts,DC=PORTAL,DC=COMPANY,DC=BE");
env.put(Context.SECURITY_CREDENTIALS, "Pass123");
env.put(Context.REFERRAL, "follow");
return env;
}
NamingEnumeration enumResult = context.search(
"DC=PORTAl,D
Potential leak of data: LDAP Admin
Detected 1 occurrence(s) of ‘CN\=Admin’:
$ cat olcPasswordHash2SSHA.ldif
dn: cn=config
changetype: modify
add: olcPasswordHash
olcPasswordHash: SSHA
-
ldapadd -f olcPasswordHash2SSHA.ldif -x -D "cn=admin,cn=config" -W
Enter LDAP Password:
modifying entry "cn=config"
ldap_modify: Other (e.g., implementation specific) error (80)
additional info: <olcPasswordHash> no valid hashes found
Potential leak of data: LDAP Admin
Detected 1 occurrence(s) of ‘CN\=Admin’:
ADD_ATTRIBUTE, newattr);
ModificationItem repitem = new ModificationItem(DirContext.REPLACE_ATTRIBUTE, newattr);
ModificationItem[] mods = new ModificationItem[2];
mods[0] = olditem;
mods[1] = newitem;
// ldapTemplate.modifyAttributes("cn=administrator,cn=Users", mods);
ldapTemplate.modifyAttributes("cn=smith,cn=Users", new ModificationItem[] { repitem });
}
<bean id="contextSource" class="org.springframework.ldap.core.support.LdapContextSource">
<property name="url" value="ldap://ld

