LMS 3.2: does LMS support LDAPS ?

[ebezombes]

Hi,

Does LMS 3.2 support LDAPS ?

Many thanks,

Elisabeth

[Joe Clarke]

Not LDAPS, but you can enable MD5 password hashing by uncommenting the LDAP_AUTHENTICATION_MECHANISM line in NMSROOT/lib/classpath/cam.properties.  If this is enabled, LMS will not send LDAP credentials in clear text.  This can work with MS AD.

[mmisonne]

Hello

I have the same question with LMS4.01

After uncommenting  the following line in cam.properties

"LDAP_AUTHENTICATION_MECHANISM=DIGEST-MD5"

It seems that this does not encrypt the username and password .

Because we can see  it with a wireshark on LMS

     [+]Internet protocol: source = @IP serveur LMS ;dest:= @IP serveur AD

                xxxxxxxxxxxUsername xxxxxx Passwordxxxxxx

Have you got any idea ?

Michel Misonne

[Joe Clarke]

If the server doesn't support the DIGEST-MD5 SASL authentication mechanism, LMS will fallback to simple.