LeakedIn Logo
Stories About Data Leaks and Related Stuff

Posts Tagged ‘LDAP Admin’

Potential leak of data: LDAP Admin

0 votedvote

Detected 4 occurrence(s) of ‘CN\=Admin’:

er slapd[1057]: do

(on the slave)
e.fr Error, ldap_start_tls failed (-1)
May  6 16:14:55 slave slapd[1278]: do_syncrepl: rid=003 rc -1 retrying (4 retries left)
May  6 16:15:00 slave slapd[1278]: slap_client_connect: URI=ldap://master.beware.fr/ DN="cn=admin,cn=config" ldap_sasl_bind_s failed (-1)
May  6 16:15:00 slave slapd[1278]: do_syncrepl: rid=001 rc -1 retrying (3 retries left)
May  6 16:15:00 slave slapd[1278]: slap_client_connect: URI=ldap://master.beware.fr Error, ldap_start_tls failed (-1)
May  6

Source: http://pastebin.com/raw.php?i=s7qp1qiB

Potential leak of data: Simple Password

0 votedvote

Detected 2 occurrence(s) of ‘^\s*pass[word]+\s*[:=]+[ \t]*[a-z0-9\-_\!]+$’:

 you need to adapt this path to the deployed file!!   ######################################
  source: /home/hegel/sites/ole_cas_server/authenticators/sql_devise.rb
  database:
    adapter: postgresql
    database: eebos_development
    username: postgres
    password: sheril
    server: localhost
    schema_search_path: ole_core
  user_table: ole_core.logins
  username_column: username
  password_column: encrypted_password
  master_crypted: $2a$10$5ykb2mLN6EehQ3MxRgIRPe.DQKACvJRecDbr4gj1RPvRaQs2RBK4a
  encryptor_options:
    

Detected 1 occurrence(s) of ‘CN\=Admin’:

 authenticator
# explanation above):
#
#authenticator:
#  class: CASServer::Authenticators::LDAP
#  ldap:
#    host: ldap.example.net
#    port: 636
#    base: dc=example,dc=net
#    filter: (objectClass=person)
#    encryption: simple_tls
#    auth_user: cn=admin,dc=example,dc=net
#    auth_password: secret
#
# If you need additional data about the user passed to the client (for example,
# their 'cn' and 'mail' attributes, you can specify the list of attributes
# under the extra_attributes config option:
#
#authen

Source: http://pastie.org/pastes/7759411/download

Potential leak of data: LDAP Admin

0 votedvote

Detected 1 occurrence(s) of ‘CN\=Admin’:

CONTEXT_FACTORY,
                "com.sun.jndi.ldap.LdapCtxFactory");
        env.put(Context.PROVIDER_URL, "ldap://localhost:389/");
        env.put(Context.SECURITY_AUTHENTICATION, "simple");

        env.put(Context.SECURITY_PRINCIPAL,
                "CN=Admin,OU=System Accounts,DC=PORTAL,DC=COMPANY,DC=BE");
        env.put(Context.SECURITY_CREDENTIALS, "Pass123");
        env.put(Context.REFERRAL, "follow");

        return env;
    }
	
NamingEnumeration enumResult = context.search(
             "DC=PORTAl,D

Source: http://pastebin.com/raw.php?i=hwANW19n

Potential leak of data: LDAP Admin

0 votedvote

Detected 1 occurrence(s) of ‘CN\=Admin’:

$ cat olcPasswordHash2SSHA.ldif 
dn: cn=config
changetype: modify
add: olcPasswordHash
olcPasswordHash: SSHA
-

ldapadd -f olcPasswordHash2SSHA.ldif -x -D "cn=admin,cn=config" -W
Enter LDAP Password: 
modifying entry "cn=config"
ldap_modify: Other (e.g., implementation specific) error (80)
        additional info: <olcPasswordHash> no valid hashes found

Source: http://pastebin.com/raw.php?i=SNf9X2xg

Potential leak of data: LDAP Admin

0 votedvote

Detected 1 occurrence(s) of ‘CN\=Admin’:

ADD_ATTRIBUTE, newattr);
    ModificationItem repitem = new ModificationItem(DirContext.REPLACE_ATTRIBUTE, newattr);
    ModificationItem[] mods = new ModificationItem[2];
    mods[0] = olditem;
    mods[1] = newitem;
    // ldapTemplate.modifyAttributes("cn=administrator,cn=Users", mods);
    ldapTemplate.modifyAttributes("cn=smith,cn=Users", new ModificationItem[] { repitem });
}
	
<bean id="contextSource" class="org.springframework.ldap.core.support.LdapContextSource">
    <property name="url" value="ldap://ld

Source: http://pastebin.com/raw.php?i=AjVSqjA8