[GH-ISSUE #176] Read-only LDAP user #67

Closed
opened 2026-02-27 08:15:04 +03:00 by kerem · 0 comments
Owner

Originally created by @idlecoder-fr on GitHub (Jun 6, 2022).
Original GitHub issue: https://github.com/lldap/lldap/issues/176

Hi !
This issue to ask if it's possible to introduce a separate "read only admin" account, allowed to read LDAP tree without being authorized to log into the web interface as admin.
For now, if one service using LLDAP as auth backend is being compromised, the "admin" account can be reused to log in the web interface (which I'd want to keep online, providing a 'self service' password change for users...).

Thanks again for the great job btw !

Originally created by @idlecoder-fr on GitHub (Jun 6, 2022). Original GitHub issue: https://github.com/lldap/lldap/issues/176 Hi ! This issue to ask if it's possible to introduce a separate "read only admin" account, allowed to read LDAP tree without being authorized to log into the web interface as admin. For now, if one service using LLDAP as auth backend is being compromised, the "admin" account can be reused to log in the web interface (which I'd want to keep online, providing a 'self service' password change for users...). Thanks again for the great job btw !
kerem closed this issue 2026-02-27 08:15:04 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/lldap-lldap#67
No description provided.