I've setup a LDAP server on a small test cluster but I'm running into some privacy issues.
The first issue was that anybody that had a login to any of the servers in the cluster could retrieve all username for all users of the entire cluster. This is not acceptable for my use-case.
I thought I managed to overcome this issue by disabling anonymous access and requiring a username and password using
bindpw. However the password is saved clear-text in the ldap.conf file which needs to be readable for world otherwise I keep getting an
id: cannot find name for user ID 22594 error for every user that tries to login to any of the servers in the cluster.
I think I'm doing missing something I just don't know what. Can anybody tell me how to setup access in such a way that users can login, retrieve their own details from LDAP but not the details of anybody else in the cluster?