OpenLDAP Baseline Security Analyzer

[Inmaculada Bravo <inma@usal.es>]

Hello

My name is Inma Bravo, I work at the University of Salamanca (Spain)
mainly administrating our OpenLDAP directory.

I have done a project called OpenLDAP Baseline Security Analyzer.[1] The
project website is written in Spanish and in English.

The purpose of this project is to develop a list of criteria that should
be taken into account for the initial plan of securing the directory,
and to show the most common mistakes that we must try to avoid.

It briefly documents the main attacks and threats that we face as
directory administrators.

It is written to be easy, straightforward, and useful.

These criteria are encoded in XML Schema, adhering to OCIL to use the
OCIL Interpreter.

I presented this project in our technical winter meeting of the
institutions that are affiliated with RedIRIS (the Spanish academic and
research network) [2], and it was well-received by the technicians.

In conclusion, the reason I am writing you is to announce the project
and to ask you for suggestions to improve and to correct it. 

I hope the project will be of your interest.


Thanks very much 

Inmaculada Bravo García

[1] http://openldap-bsa.forja.rediris.es/
[2] http://www.rediris.es/