User Guide

Table Of Contents
Advanced topics 545
Using LDAP security
To use security, first ensure that the LDAP server supports SSL v2 security.
Specify the
cfldap tag secure attribute as follows:
secure = "cfssl_basic"
For example:
<cfldap action="modify"
modifyType="add"
atributes="cn=Lizzie"
dn="uid=lborden, ou=People, o=Airius.com"
server=#myServer#
username=#myUserName#
password=#myPassword#
secure="cfssl_basic"
port=636>
The port attribute specifies the server port used for secure LDAP communications, which is 636
by default. If you do not specify a port, ColdFusion attempts to connect to the default,
nonsecure, LDAP port 389.
Application security
To ensure application security, you must prevent outsiders from gaining access to the passwords
that you use in
cfldap tags. The best way to do this is to use variables for your username and
password attributes. You can set these variables on one encrypted application page. For more
information on securing applications, see Chapter 16, “Securing Applications, on page 373.