<![CDATA[Secure LDAP?]]>Guys,
I noticed while fooling around in nextcloud that it is using LDAP as opposed to LDAPS to connect to cloudron LDAP. This means that requests and creds are sent in plain text. Now somebody would have to be on the container network to sniff these, but still a big no no. (I once had my enterprise admin credentials exposed on a webex because my boss used LDAP instead of LDAPS and was reviewing a PCAP live.)

]]>https://forum.cloudron.io/topic/2523/secure-ldapRSS for NodeTue, 11 Aug 2026 08:38:42 GMTFri, 15 May 2020 18:57:15 GMT60<![CDATA[Reply to Secure LDAP? on Thu, 28 May 2020 19:55:29 GMT]]>I think there's a genuine case in the future where if we introduce per-app admins, then app admin can access terminal of one app to see traffic (and sniff ldap/db creds) of another app. I think it's an excellent suggestion to remove it!

]]>https://forum.cloudron.io/post/8924https://forum.cloudron.io/post/8924Thu, 28 May 2020 19:55:29 GMT<![CDATA[Reply to Secure LDAP? on Thu, 28 May 2020 19:01:05 GMT]]>@girish Thanks, might be paranoid, but the little things add up.

]]>https://forum.cloudron.io/post/8920https://forum.cloudron.io/post/8920Thu, 28 May 2020 19:01:05 GMT<![CDATA[Reply to Secure LDAP? on Thu, 28 May 2020 16:36:57 GMT]]>@will Just wanted to follow up on this. I did end up removing NET_RAW caps from the app containers in 5.2. So, containers cannot sniff each other's traffic anymore.

]]>https://forum.cloudron.io/post/8915https://forum.cloudron.io/post/8915Thu, 28 May 2020 16:36:57 GMT<![CDATA[Reply to Secure LDAP? on Fri, 15 May 2020 20:08:43 GMT]]>I have pondered adding CapDrop NET_RAW in the past to all our containers but this will break some tools like ping. But the real reason I haven't added it is that because as @nebulon said, if user gets access to container network, then all is lost already. This is why in our previous release, we started making sure that apps that use the docker addon can can only be installed by owner privileges (i.e a user who already has ssh access).

One attack I can think of is if the app container image is itself compromised. Atleast, right now, all app images are personally tested by us and we only install upstream apt packages and we don't allow 3rd party packagers. So, maybe dropping NET_RAW is worth it for future proofing. AFAIK, this won't break anything.

]]>https://forum.cloudron.io/post/8538https://forum.cloudron.io/post/8538Fri, 15 May 2020 20:08:43 GMT<![CDATA[Reply to Secure LDAP? on Fri, 15 May 2020 19:56:24 GMT]]>As you said this is only happening within the server local container network. If a person has access to that, that person has numerous ways to get a user's password. For example just adding a console.log() in the code which validates the password. I don't really see how the security is improved by making the local connection using locally available certificates.

]]>https://forum.cloudron.io/post/8537https://forum.cloudron.io/post/8537Fri, 15 May 2020 19:56:24 GMT