Foxpass

This blog post is for people who are looking for a guide to LDAP . We will discuss what LDAP is, how it works, and some of its advantages. Furthermore, we will introduce you to the basics of setting up an LDAP server and give you some tips on troubleshooting common issues. What does LDAP stand for? How does LDAP work? Advantages of using an LDAP server? If you want to know the answers to these questions, continue reading, and let’s get started! What is LDAP? For starters, LDAP is a protocol for accessing and updating directory information that can be found on an LDAP server . Because it is a standard, users don’t need to worry about compatibility issues with LDAP servers. How Does LDAP Work?     There are two components of the system: clients and servers. The client (such as Outlook or Mozilla Thunderbird) connects to the server and requests information. The server then responds with a list of all the entries that match the client’s search criteria. The client can then ch...

RBAC or Role Based Access Control is a network security system  designed to restrict system access depending on the designation/ role of a person in an organization.  The working mechanism of RBAC involves setting permissions and privileges, which defines the user access to the systems and automatically restricts it. The main idea behind using role based access control is to safeguard sensitive and crucial information. When using RBAC, the leading authorities of an organization assign each working employee a role and determine their position in the functional space, hence deciding how much data access needs to be provided to them. However, this security system is mostly used in big institutions.   Depending on a role one has occupied in the RBAC, one can read, edit, or delete articles in a writing application. Role-based access control has two roles, namely: Writer: A writer has the right to edit, delete and read.  Reader: A reader can only read the documents....

In the digital era, with everybody in need of wifi access all the time, the market to be connected with a secure internet system has increased more than ever. And, so in order to secure one’s data while using public wifi, it is always suggested and advised to use VPN. VPN stands for virtual private network, and it is a network security system that encrypts your data and hides your IP address by simply misguiding the location of a person using the data. Hence, securing your online identity. These days  VPN for business is not just the only use left of it, but commoners have too started using VPN for their own purposes. Let’s have a look at some of the reasons why one should use a VPN. 1. Security on public wifi There’s no doubt that public and open wifi are easy and very convenient to use, but at the same time, they are a risk to one’s data.  Anyone who is using open wifi is at higher risk of data breaches and ensuring you don’t encounter any such unfortunate event, VPN is adv...

Lightweight Directory Access Protocol, or we can refer to it as LDAP , is a security software system that is designed to store and arrange the data to make it easily searchable.  Sort of information that can be stored by LDAP is - 1) Information about organizations 2) Devices 3) Users stored in directories Servers mainly use LDAP to speak with on-premise directories. The information stored in an LDAP system is framed in a hierarchical structure, and it is known as Directory Information Tree (DIT). All the organizing, and structuring of data, which make it easier to navigate directories, find specific data, and administer user access policies is done by DIT.  LDAP functions to serve as the central hub, or we can source for authentication and authorization. Apart from data and information, LDAP also stores user credentials (username/password) and then accesses them later to authenticate the user. LDAP is based and functions on a client-server interaction.  Let us talk abou...

The main difference between an LDAP server and an Active Directory is that one of them, i.e Active directory has a much more complex network to operate compared to, though both are used to secure and safeguard the network. LDAP does not come with any complexities and functionalities like an active directory.  Let’s have a detailed look at both LDAP and active directory. LDAP LDAP is an abbreviation for Lightweight Directory Access Protocol. An LDAP server is a lightweight cross-platform software protocol that is used for directory service authentication.  LDAP is one of those security network systems that allow anyone to communicate with the directory service providers. It also allows locating data related to the organization, users, devices, and other resources such as files in a network.  Directory services are a storehouse of user account details, including username, password, and computer account; hence, LDAP acts as a common central place for authentication in such...

From the user's point of view, an SSH connection is established like a telnet session (connection request, login request, password request), the principle is actually much more complex. SSH guarantees: Confidentiality: packet encryption guarantees this. The old services such as telnet, rlogin... sent the data in the clear; Integrity: SSH ensures that packets flowing from one host to another are not corrupted; Authentication: each SSH connection verifies the identity of the server (by its host key ~ / .ssh / known_hosts ) then that of the client (by password or public key ~ / .ssh / authorized_keys ); Authorization: it is possible with SSH to limit the actions authorized to the user ( ~ / ssh / .authorization ); Tunneling: SSH is used to secure a service whose information usually circulates in clear (POP, IMAP, VNC...). Other aspects of tunneling are the securing of the X11 protocol (X11forwarding), and the use of private SSH Keys located on a remote host (Agent forwarding). SSH is...

Until now, we have made a habit of using the password as the sole factor of authentication. However, you should know that it is also possible to use another factor, a key. This is sometimes preferred because the key avoids having to remember different passwords systematically. Here we will see the general operation of this authentication method. It is common on SSH keys servers to only allow key authentication to secure this protocol. Therefore, the key generation is mainly done under Linux without too much problem since OpenSSH is natively present there. Under Windows, however, some operations have to be carried out to generate and send our key to the server. SSH Keys authentication is therefore done via a pair of keys, and the client will thus generate a pair of keys, one public and one private. He will, of course, keep his private key to himself and send the public key to the SSH server, which will store it in a place provided for this purpose. Generation of the key Since an SSH c...