This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Projects/OWASP Framework Security Project/Evaluations of LDAP Client APIs"
From OWASP
(Created page with "Here we evaluate and compare various LDAP Client APIs to understand how well they satisfy the Projects/OWASP_Framework_Security_Project/Secure_LDAP_API_Standard|Secure LDAP...") |
|||
| Line 22: | Line 22: | ||
<th>Score</th> | <th>Score</th> | ||
</tr> | </tr> | ||
| + | <tr><td>[http://directory.apache.org/api/user-guide/2-basic-ldap-api-usage.html Apache Directory LDAP API (java)]</td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | ||
<tr><td>[https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-tags/tags-j-l/cfldap.html ColdFusion 10 cfldap]</td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | <tr><td>[https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-tags/tags-j-l/cfldap.html ColdFusion 10 cfldap]</td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | ||
| − | |||
| − | |||
<tr><td>[https://msdn.microsoft.com/en-us/library/System.DirectoryServices(v=vs.110).aspx .NET 4.5]</td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | <tr><td>[https://msdn.microsoft.com/en-us/library/System.DirectoryServices(v=vs.110).aspx .NET 4.5]</td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | ||
<tr><td>[http://search.cpan.org/~marschap/perl-ldap/lib/Net/LDAP.pod Perl Net::LDAP]</td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | <tr><td>[http://search.cpan.org/~marschap/perl-ldap/lib/Net/LDAP.pod Perl Net::LDAP]</td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | ||
| + | <tr><td>[http://php.net/manual/en/ref.ldap.php PHP 5]</td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | ||
<tr><td>[http://www.python-ldap.org/ python-ldap]</td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | <tr><td>[http://www.python-ldap.org/ python-ldap]</td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | ||
<tr><td></td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | <tr><td></td><td>?</td><td></td><td></td><td></td><td></td><td></td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td><td>?</td></tr> | ||
| Line 37: | Line 37: | ||
== Tickets == | == Tickets == | ||
TODO: here we keep track of links to bug submissions/feature requests sent to each API maintainer | TODO: here we keep track of links to bug submissions/feature requests sent to each API maintainer | ||
| + | |||
| + | === Apache Directory LDAP API (java) === | ||
| + | === ColdFusion 10 cfldap === | ||
| + | === .NET 4.5 === | ||
| + | === Perl Net::LDAP === | ||
| + | === PHP 5 === | ||
| + | === python-ldap === | ||
Revision as of 17:43, 19 January 2016
Here we evaluate and compare various LDAP Client APIs to understand how well they satisfy the Secure LDAP Client API Standard.
NOTE: Both the standard and evaluations below are in a draft state and are likely to change before formal publication.
Overview
| API | Grade | Documents the Security Risks of LDAP Filter Injection | Documents LDAP Bind Authentication Without Filter Queries | Provides an LDAP Filter Escape Function | Provides LDAP Filter Syntax Templates | Provides an Abstract API for LDAP Filter Queries | Supports LDAP with StartTLS | Supports LDAPS | Enables SSL/TLS Certificate Validation by Default | Documents the Customization of Trusted Certificate Authorities | Documents the Risk of Disabling Certificate Validation | Score |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Apache Directory LDAP API (java) | ? | ? | ? | ? | ? | ? | ? | |||||
| ColdFusion 10 cfldap | ? | ? | ? | ? | ? | ? | ? | |||||
| .NET 4.5 | ? | ? | ? | ? | ? | ? | ? | |||||
| Perl Net::LDAP | ? | ? | ? | ? | ? | ? | ? | |||||
| PHP 5 | ? | ? | ? | ? | ? | ? | ? | |||||
| python-ldap | ? | ? | ? | ? | ? | ? | ? | |||||
| ? | ? | ? | ? | ? | ? | ? | ||||||
| ? | ? | ? | ? | ? | ? | ? |
Notes
TODO: explain any quirks of APIs or reasoning on why the evaluation came out the way it did
Tickets
TODO: here we keep track of links to bug submissions/feature requests sent to each API maintainer
