LDAP Security

Charles and I have been emailing back and forth about the security of LDAP and my incorporation of LDAP authentication into WordPress makes this issue even more important.
My question is this:
Could a hacker sniffing UA network packets intercept the traffic between, say, the TCF Web server and the LDAP server? And could he/she thereby discover [...]

LDAP and WordPress

I was about to leave another comment on Charles’ useful post about his LDAP script, but then I figured that this is a different enough topic to warrant its own post — even though inspired by Charles’ LDAP enthusiasm.
I’ve just been experimenting with using LDAP to authenticate users on my WordPress sites and, I tell [...]

Update to LDAP entry

If you downloaded the authenticate() class from my post “Using LDAP Authentication for Website Logins“, you may wish to download it again, the documentation at the top of the original file posted didn’t reflect changes recently made to the script. The info on how to use a config file for a different server had [...]

Using LDAP Authentication for Website Logins

What’s so great about using the LDAP?
Ever try creating your own login and authentication system for a Web Application?  There are lots of things to ponder in such an undertaking.  From security to data storage to user management,  it can be a real hassle.  Once you do get your custom authentication scheme in place, your [...]