Are LDAP User Credentials Stored in Dashboard?


Product Name

CIS-CAT Pro Dashboard

Product Version

v3.0.0+

Date

Jan 10, 2024



Ā 

Problem

When using LDAP with Dashboard, are the LDAP credentials stored in the Dashboard database?

Ā 

Solution

No, the LDAP credentials are not stored in the Dashboard database. When Dashboard creates the LDAP user, Dashboard generates a random fake password to put into the password field. Dashboard performs LDAP user authentication by querying the LDAP server.

LDAP/AD roles and user properties such as firstname, lastname and email will be imported. If the user doesn't exist in CCPD, the username will be created on login and granted with a basic user role (ROLE_USER) by default along with LDAP Roles. For additional information on Dashboard LDAP integration, see this section of the documentation.

Keywords; LDAP Credentials Password

Content by Label


Copyright Ā© 2024

Center for Internet SecurityĀ®


Ā