| email this FAQ to a colleague
Q: I want to know if anyone has some info on securing LDAP and P&M from
being publicly browsable. I found that I could browse the general LDAP table on a development site,
and it brought up the issue of securing the datastore from being browsable
by registered or anonymous individuals. LDAP//myserver:1003 or using it as a Directory Search Source for a people
search returns a search form and users can list members at will. A: You can setup authentication on your Membereship directory. This is done
inside the P&M snap-in inside the MMC. The defalut option is allow
anonymous which means no one will be chanllenged for a user ID and password
to browse the directory. You can choose to use Basic or if you run a command line utilty you can even
turn on DPA authentication for the directory. All of this is fully documented in the Site Server 3.0 documentation. - Jeff Overall |
