Introduction

When configuring CAST Imaging to use LDAP authentication, the parameter security.ldap.account.password must be populated with the LDAP service account password:

# -----------------------------
# Parameters for ldap mode
# -----------------------------
security.ldap.url=
security.ldap.account.dn=
security.ldap.account.password=
security.ldap.usersearch.base=
security.ldap.usersearch.filter=
security.ldap.groupsearch.base=
security.ldap.groupsearch.filter=
security.ldap.groupsearch.base.filter=

By default, this password is passed in clear text and this can represent a potential security risk. If your organization requires this password to be encrypted, you can use the following instructions to do so.

Encryption process

Microsoft Windows traditional installer and Docker for Windows

Open a command prompt (CMD) and navigate to the following location:

Traditional Windows installer: %PROGRAMFILES%\CAST\ImagingSystem\login\

Docker Installer (located in the unzipped extension folder): login\

Run the aip-encryption-tool.bat file to load the encryption tool. Enter the password you wish to encrypt and then click the Encrypt button:

The encrypted password is shown in the Encrypted field. This is used when configuring LDAP, explained below.

Linux

Navigate to:

Docker Installer (located in the unzipped extension folder): login\

Run dos2unix and provide execute privileges to the aip-encryption-tool.sh file: 

$ dos2unix aip-encryption-tool.sh
$ chmod +x aip-encryption-tool.sh

Execute the script file to load the encryption tool:

./aip-encryption-tool.sh

Enter the password you wish to encrypt and then click the Encrypt button:

The encrypted password is shown in the Encrypted field. This is used when configuring LDAP, explained below.

Using the encrypted password

When you have encrytped the password, use this in place of the clear text password in the following file:

Traditional Windows installer: %APPDATA%\CAST\ImagingSystem\login\application.properties
 
Docker Installer (located in the unzipped extension folder):
server\login\application.properties or login\application.properties

For example:

# -----------------------------
# Parameters for ldap mode
# -----------------------------
security.ldap.url=
security.ldap.account.dn=
security.ldap.account.password=CRYPTED2:90B1A6EC1618661401B724D
security.ldap.usersearch.base=
security.ldap.usersearch.filter=
security.ldap.groupsearch.base=
security.ldap.groupsearch.filter=
security.ldap.groupsearch.base.filter=