Tuesday 23 September 2008

JDE and LDAP

It's not the best implementation of LDAP authentication I've come across... But, lets have a more honest look at things, is it the worst... Hmmm, it might be.

What about some of the limitations:

1 domain only
username < 10 chars
password < 10 chars WTF!!!! This is a crock!

okay, and now the best stuff...

So I work as a site with a large AD implementation, 5000 users... something like that... Not that many JDe users... Each time a user tries to login to JDE, the security kernel is saying "Cannot find username XXXX in LDAP"... But, any LDAP browser or MAD tool can. I don't know how it's running it's queries, or if it's binding to the correct member - but it's bad!

No comments: