seanthegeek / easyad Goto Github PK

Multiple tests have shown that credentials sent with EasyAD are sent in clear text over the network. This is despite setting "AD_REQUIRE_TLS" being set to true and "AD_CA_CERT_FILE" pointing to a valid domain certificate encoded in Base64.

Testing indicates that the "ldap" library was installed with TLS support, indicated by "ldap.TLS_AVAIL" being set to a non-zero value.

This issue appears to be within the LDAP library, however, it's still worth having this issue here in case a developer uses this library thinking it's encrypted and safe.

Hey, I am using this library to authenticate user of AD in a flask based web application. For the testing purpose I am trying with formsys test ldap server (https://www.forumsys.com/tutorials/integration-how-to/ldap/online-ldap-test-server).

But when I am trying to connect, It is showing error and can't connect. Can you please tell what is wrong with it!