ℹ️Introduction to Identities

Active Directory's role in security

Components of an IAM System

• Directory

• Directory Management Tool

• Access Control

• Privilege Management

• Audit and Reporting

Forms of Identity Subsystems

Linux

• /etc/shadow

• /etc/passwd

Windows

• Security Access Manager

Identity Management

• Linux-based OpenLDAP

• Windows-based Active Directory

• Third party solutions: Shibboleth, Okta, etc.

• Logical structure in the organization

• Physical mapping across site

Management Tools

Active Directory

• Remote Server Administration Tool

• Powershell

LDAP Service (Active Directory/Linux)

• LDAPAdmin

• Jxplorer

Authentication

• UserID and password

• Passwords stored as hashes

• Complex passwords - failed solution

• Multifactor authentication

Active Directory Auditing

• Collect data from the directory

• Analyze it to determine directory health

• Ensure the directory is secure

• Ensure it supports the IT mission

The LDAP Protocol

• Lightweight Directory Access Protocol

• Repository for organizational entity information

• Uses port 389 for LDAP and 636 for port LDAPS

LDAP System

• Distributed servers

• Coordinated response to requests

Interact with LDAP at the command line

OpenLDAP, Main Pageopenldap.org

nmap -p 389 <IP address> --script ldap-search

ldapsearch -x -b "dc=cybex,dc=nz" -H ldap://<IP address>

Connect to the LDAP server using SSH

ssh <username>@<IP address> 

Dump database contents

sudo slapcat 

Decode the Password

echo -n "<encoded password>" | base64 --decode

The LDAPAdmin Tool

LDAP AdminSourceForge

Active Directory Domain Services

• Directory

• Schema

• Catalog

• Group Policy Objects

• Replication service

• Security for identity and access control

Active Directory Hierarchy

dmitry yahoo.com

Domain Controller View

Trust Relationships

Interact with Active Directory at the command line

nmap -p 389 <IP address> --script ldap.search --script-args="script.username=<domain\username>,ldap.password=<password>,qfilter=users" -Pn

Access LDAP services with a GUI client

Install Jxplorer

sudo apt install jxplorer

Run Jxplorer GUI

jxplorer

Active Directory Security Audit

Active Directory (AD) Auditing Tool | Lepide AuditorLepide

Track Privileged Active Directory Users - FreewareLepide

Run The Tool

cmd> lepide

• Enter Domain Name or IP address

• Enter the admin username

• Enter password

• Click Scan Now button