You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@directory.apache.org by "Hammond, Steven" <St...@Polycom.com> on 2013/02/01 22:52:30 UTC
Is there a way to disable anonymous access to rootDSE
We need to satisfy a requirement that takes issue with being able to see who the vendor of the directory server is without authenticating first. I think it will be a problem since authenticating uses SASL and rootDSE shows the SASLmechanisms allowed, but maybe someone knows a way.
Requirement is related to this page. http://www.stigviewer.com/check/V-14797
Thank you.
Re: Is there a way to disable anonymous access to rootDSE
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 2/1/13 10:52 PM, Hammond, Steven a écrit :
> We need to satisfy a requirement that takes issue with being able to see who the vendor of the directory server is without authenticating first. I think it will be a problem since authenticating uses SASL and rootDSE shows the SASLmechanisms allowed, but maybe someone knows a way.
> Requirement is related to this page. http://www.stigviewer.com/check/V-14797
> Thank you.
>
Kiran was kind enough to add a JIRA for this purpose :
https://issues.apache.org/jira/browse/DIRSERVER-1795
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: Is there a way to disable anonymous access to rootDSE
Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 2/2/13 6:03 AM, Kiran Ayyagari a écrit :
> no, this is not currently possible
We may need to implement an ACI authz on the rootDSE, something we don't
currently support.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: Is there a way to disable anonymous access to rootDSE
Posted by Kiran Ayyagari <ka...@apache.org>.
no, this is not currently possible
On Sat, Feb 2, 2013 at 3:22 AM, Hammond, Steven
<St...@polycom.com>wrote:
> We need to satisfy a requirement that takes issue with being able to see
> who the vendor of the directory server is without authenticating first. I
> think it will be a problem since authenticating uses SASL and rootDSE shows
> the SASLmechanisms allowed, but maybe someone knows a way.
> Requirement is related to this page.
> http://www.stigviewer.com/check/V-14797
> Thank you.
>
--
Kiran Ayyagari
http://keydap.com