Author Topic: Unauthenticated LDAP Bind  (Read 648 times)

Lexa6283

  • Zen Apprentice
  • *
  • Posts: 17
  • Karma: +1/-0
    • View Profile
Unauthenticated LDAP Bind
« on: December 27, 2022, 03:33:33 pm »
Hello,
Reaching out here as I have not been able to find the answer, our pentesting picked out our Zentyal server for allowing unathenticated LDAP bind and exposing information about domain which could be leveraged.....

How can I disable unauthenticated LDAP Bind in Zentyal?

dzidek23

  • Zen Apprentice
  • *
  • Posts: 45
  • Karma: +1/-0
    • View Profile
Re: Unauthenticated LDAP Bind
« Reply #1 on: January 17, 2023, 11:41:24 am »
Hi,

not sure what to suggest, maybe apart from configuring firewall.

You could also raise an issue on https://github.com/zentyal/zentyal/issues if you can provide more details, this might be looked at by the developers.