Uploaded image for project: 'Documentation'
  1. Documentation
  2. DOCS-11366

Reasons for enabling LDAPS

    • 0.5

      Enable LDAP Authentication for your Ops Manager Project has the phrase:

      "SSL is not required for use with LDAP authentication"

      Could we replace this with a warning or at least informational box? Perhaps something more like:

      "Please note that LDAP by default is not encrypted and sends credentials (username and password) in plaintext, which could compromise them on insecure networks. Use of SSL/TLS with LDAP (LDAPS) to encrypt authentication is strongly recommended. Many modern directory services, such as Active Directory or Active Directory Domain Controllers, require encrypted communications."

            Assignee:
            tony.sansone@mongodb.com Anthony Sansone (Inactive)
            Reporter:
            davi.ottenheimer Davi Ottenheimer
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:
              6 years, 7 weeks, 5 days ago