NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform.
You will still be able to view content, but posting and replying will be temporarily disabled.
To learn more, please review the information in this blog post.

Data Protection

SnapCenter LDAP(s) settings?

Hans088
5,725 Views

According to our security team the SnapCenter server (4.1) uses plain text ldap authentication for the Windows runas accounts defined for the plugin for MSSQL. Does anyone know if it is possible to configure ldaps (tcp/636) within SnapCenter? I can't seem to find any configurable options regarding ldap authentication within the GUI or configuration files.  

1 ACCEPTED SOLUTION

ryanfilli
5,597 Views

We currently have this issue and have a call open with netapp regarding this. I recommend you open a call to empthasise this issue. We are on version 4.2 and its still an issue


@Hans088 wrote:

According to our security team the SnapCenter server (4.1) uses plain text ldap authentication for the Windows runas accounts defined for the plugin for MSSQL. Does anyone know if it is possible to configure ldaps (tcp/636) within SnapCenter? I can't seem to find any configurable options regarding ldap authentication within the GUI or configuration files.  



.

View solution in original post

3 REPLIES 3

ryanfilli
5,598 Views

We currently have this issue and have a call open with netapp regarding this. I recommend you open a call to empthasise this issue. We are on version 4.2 and its still an issue


@Hans088 wrote:

According to our security team the SnapCenter server (4.1) uses plain text ldap authentication for the Windows runas accounts defined for the plugin for MSSQL. Does anyone know if it is possible to configure ldaps (tcp/636) within SnapCenter? I can't seem to find any configurable options regarding ldap authentication within the GUI or configuration files.  



.

sysir
4,312 Views

Hello,

 

Did you ever get this resolved or figured out?

 

 

Hans088
4,106 Views

Unfortunately no, we're now on version 4.4 and snapcenter still uses plaintext passwords for accounts used by MSSQL/MySQL/Exchange agents. Abysmal.

Public