About the Author

author photo

Joe Harris, CCIE No. 6200 (R&S, Security & SP) is a Systems Engineer with Cisco Systems® specializing in Security. In addition to authoring Cisco Network Security Little Black Book, Joe has also been a technical reviewer for several Cisco Press publications and written articles, white papers, and presentations on various security technologies. He also assists various Certification Partners by beta testing their newest CCIE certification workbooks and has been recognized by Cisco as an SE Wall of Fame award winner.

See All Posts by This Author

Secure LDAP

May 15th, 2008 • Related • Filed Under

So the customer in the previous post went to configure LDAP on his ASA and could not get it work correctly. He called me in hopes that I could get it working…Well he had configured the LDAP Server via ASDM and so logged into his system and pulled up the ‘Edit AAA Server’ page like the one shown below:

Notice the check box that states ‘Enable LDAP over SSL’…well he had this selected without properly configuring LDAP-S (LDAP over SSL). If you are not familiar with LDAP you should know that the LDAP protocol operates in two modes: non-secure using the well-known TCP port 389 or secure-mode using the well-known TCP port 636 by default. So if your going to use LDAP over SSL then you will need to follow the steps outlined in the following document: Enable LDAP over SSL

There Is 1 Response So Far. »

  1. Gravatar

    Comment by Eugene UNITED STATES Windows XP Internet Explorer 7.0 on 15 May 2008:

    It looks pretty interesting . However why go through all this trouble, when you can configure IAS to do the same thing in minutes.

Post a Response