-1

I have a production web server running Django. Currently every request made requires an LDAP Bind and Search request. I can use the django-auth-ldap plugin to enable LDAP Search caching. However, my problem is that I am in an environment that sometimes loses connection to the main AD server(s). When this happens LDAP Bind will fail. I was wondering if there is a good option for caching both LDAP Binding and Searching requests. I looked into Squid to solve this problem but I'm unsure if it is possible.

  1. Has anyone solved the problem of caching Searches and Bind requests to an LDAP server?
  2. Is there a reason why most LDAP caches do not cache Binds?

Note: Switching authentication to OAuth or a Token based system is currently not an option.

1 Answers1

0

Usually some kind of "surrogate credentials" come into play. Your application has to handle this. Like setting a cookie or recording the IP address of the connection and not issuing LDAP request when it sees one of those...

Marki
  • 2,854
  • 3
  • 28
  • 45