How to Disable Null Bind and Null Base in OID (Doc ID 316143.1)

Last updated on AUGUST 30, 2023

Applies to:

Goal

Two potential issues have been identified with respect to LDAP servers. This document discusses how/whether to correct them in OID

1. "LDAP allows null bases"

Description:

Improperly configured LDAP servers will allow the directory BASE to be set to NULL. This allows information to be culled without any prior knowledge of the directory structure. Coupled with a NULL BIND, an anonymous user can query your LDAP server using a tool such as 'LdapMiner'

Solution: Disable NULL BASE queries on your LDAP server.

Reference the Internet Security Systems article LDAP null base returns information

2. "LDAP allows anonymous binds"

Description:

Improperly configured LDAP servers will allow any user to connect to the server and query for information.

Solution: Disable the NULL bind entry or control the entry with Access Control Lists (ACLs).

Reference the Internet Security Systems article LDAP anonymous access to directory

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.