<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#222222">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#222222"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#222222">We're working on getting ArchivesSpace configured and our IT department has some concerns. They wish to use LDAP (probably Active Directory) for user authentication. To do this, we would have to have valid bind
credentials stored in the config file. The problem they see is that this file is stored with those credentials unencrypted, which is a safety concern. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#222222"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#222222">Have others considered this when setting up their LDAP implementations? What have you done to alleviate this risk? <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#222222"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#222222">Thank you,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#222222"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#222222">Zach Pelli<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#222222">Digital Collections Developer<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#222222">Seton Hall University Library<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#222222"><a href="mailto:zachary.pelli@shu.edu" target="_blank"><span style="color:#6611CC;border:none windowtext 1.0pt;padding:0in;text-decoration:none">zachary.pelli@shu.edu</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>