Are LDAP User Credentials Stored in Dashboard?


Product Name

CIS-CAT Pro Dashboard

Product Version

v3.0.0+

Date

Jan 10, 2024



 

Problem

When using LDAP with Dashboard, are the LDAP credentials stored in the Dashboard database?

 

Solution

No, the LDAP credentials are not stored in the Dashboard database. When Dashboard creates the LDAP user, Dashboard generates a random fake password to put into the password field. Dashboard performs LDAP user authentication by querying the LDAP server.

LDAP/AD roles and user properties such as firstname, lastname and email will be imported. If the user doesn't exist in CCPD, the username will be created on login and granted with a basic user role (ROLE_USER) by default along with LDAP Roles. For additional information on Dashboard LDAP integration, see this section of the documentation.

Keywords; LDAP Credentials Password

Content by Label


Copyright © 2024

Center for Internet Security®