Security issues with LDAP NULL base connections on windows 2008

Security issues with LDAP NULL base connections on windows 2008

http://www.nessus.org/plugins/index....ingle&id=10722

Solution : extract from above URL

If the remote LDAP server supports a version of the LDAP protocol
before v3, consider whether to disable NULL BASE queries on your LDAP
server.



Does Windows 2008 support LDAP Version 2 or LDAP Version 3 ? How do I go
about disabling it?

Hello chris,

By default, anonymous LDAP operations, except rootDSE searches and binds,
are not permitted on Windows 2003 domain controllers or higher.

See also here:
http://support.microsoft.com/kb/320528

Search for"Anonymous queries":
http://technet.microsoft.com/en-us/l...8WS.10%29.aspx



Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Security issues with LDAP NULL base connections on windows 2008
>
> http://www.nessus.org/plugins/index....ingle&id=10722
>
> Solution : extract from above URL
>
> If the remote LDAP server supports a version of the LDAP protocol
> before v3, consider whether to disable NULL BASE queries on your LDAP
> server.
>
> Does Windows 2008 support LDAP Version 2 or LDAP Version 3 ? How do I
> go about disabling it?
>