What are the disadvantages of using LDAP authentication for Splunk users?

[saifuddin9122]

Can any one help in listing out the risks involved in LDAP authentication for user?

[daishih · Accepted solution]

Check out:

RFC 2829 - Authentication Methods for LDAP

It defines basic threats to an LDAP directory service as:

(1) Unauthorized access to data via data-fetching operations,
(2) Unauthorized access to reusable client authentication information by monitoring others' access,
(3) Unauthorized access to data by monitoring others' access,
(4) Unauthorized modification of data,
(5) Unauthorized modification of configuration,
(6) Unauthorized or excessive use of resources (denial ofservice), and
(7) Spoofing of directory: Tricking a client into believing that
information came from the directory when in fact it did not,
either by modifying data in transit or misdirecting the
client's connection.

Threats (1), (4), (5) and (6) are due to hostile clients. Threats (2), (3) and (7) are due to hostile agents on the path between client and server, or posing as a server.

http://www.rfc-base.org/rfc-2829.html

Was there something more specific you were concerned about?