Base
Hardened build
minimal ports, security patches applied at build time
LTB Self Service Password on Ubuntu 24.04 LTS
Azure
Security
Self Service Password, the LDAP Tool Box password self service portal, ready on first boot with a directory server included so users reset their own passwords straight away.
Overview
Self Service Password is the LDAP Tool Box project's web application for letting people manage their own directory password. Users open a page in a browser, prove who they are, and set a new password themselves, which removes what is consistently one of the highest volume and lowest value categories of request an IT team handles. They can change a password they already know, or reset one they have forgotten by answering security questions they registered earlier, and every candidate password is checked against a policy covering length, mixed case, digits, special characters and reuse, displayed on screen as they type. Reset by emailed token and reset by SMS are built in and ready to be enabled once a mail relay or SMS gateway is connected.
It suits any team running an LDAP directory or Active Directory that wants to cut password reset tickets without giving up control of password policy.
Why the cloudimg image
cloudimg delivers the portal fully installed behind nginx and PHP, with an OpenLDAP directory server on the same instance already organised with People and Groups containers, a dedicated service account and sample accounts, so a real password change can be completed within minutes of launch rather than after a directory build. The image is secure by default: no working credential is baked in, and on each machine's first boot the directory manager password, the service account password the portal binds with, the key that encrypts stored security answers and the sample account passwords are all generated uniquely for that instance. The web tier is gated so it cannot serve an instance whose secrets have not yet been generated, the directory listens only on the loopback interface, and the configuration file holding the directory password sits outside anything the web server can serve. Everything is backed by a paired deployment guide and 24/7 support.
Common uses
- Let staff reset forgotten directory passwords without a helpdesk ticket
- Enforce a consistent password policy across every account in your directory
- Give an existing Active Directory or OpenLDAP a self service password portal
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
2F
2FAuth on Ubuntu 24.04 LTS
Security
2FAuth is a free, open source, self hosted web app for managing your two factor authentication accounts.
Ad
acme-dns on Ubuntu 24.04 LTS
Security
The image installs acme-dns 2.0.2 from the official upstream release (github.com/acme-dns/acme-dns, the project formerly...
addy.io on Ubuntu 24.04
Security
Mail sent to an alias is forwarded to your real inbox, and you can reply from the alias so the other side never learns w...
AliasVault on Ubuntu 24.04
Security
AliasVault is an open source, end to end encrypted password manager combined with a private email alias service that you...
Apache SpamAssassin
Security
This image runs Apache SpamAssassin, the long established open source anti spam platform, fully configured and security ...
Apache Syncope on Ubuntu 24.04
Security
Apache Syncope is an open source identity management and identity governance platform.