Protecting the bindpw in /etc/ldap.conf

[Stainforth, Matthew (SD/DS)]

> We're about to set up our RHEL servers to authenticate againts Active
> Directory (AD) 2008. I'd like to protect the binding user password
> (i.e.
> bindpw) so that regulars users can't get hold of it. Are others doing
> this
> too, or does one not consider this as a security issue? If protecting
> it,
> how to you set up this?
	
Kerberos is what I use instead of LDAP and it doesn't require a password, at least in my environment.

Matt