Product Name
CIS-CAT Pro Dashboard
Product Version
v3.0.0+
Date
Problem
When using LDAP with Dashboard, are the LDAP credentials stored in the Dashboard database?
Solution
No, the LDAP credentials are not stored in the Dashboard database. When Dashboard creates the LDAP user, Dashboard generates a random fake password to put into the password field. Dashboard performs LDAP user authentication by querying the LDAP server.
LDAP/AD roles and user properties such as firstname, lastname and email will be imported. If the user doesn't exist in CCPD, the username will be created on login and granted with a basic user role (ROLE_USER) by default along with LDAP Roles. For additional information on Dashboard LDAP integration, see this section of the documentation.