{"id":17941825,"url":"https://github.com/n3m3z1z/ldap-project","last_synced_at":"2026-05-03T17:34:34.902Z","repository":{"id":258362948,"uuid":"867689816","full_name":"n3M3Z1Z/LDAP-Project","owner":"n3M3Z1Z","description":"A simple and Basic LDAP-Server, and Server hardening, this is our exam project.","archived":false,"fork":false,"pushed_at":"2024-10-18T11:28:52.000Z","size":40187,"stargazers_count":0,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-04-03T13:20:06.657Z","etag":null,"topics":["bash","cyber-security","incident-response","json","ldap-server","linux","pdf","python","threat-dragon","vagrantfile","virtualbox"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/n3M3Z1Z.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-10-04T14:31:15.000Z","updated_at":"2024-10-18T11:28:55.000Z","dependencies_parsed_at":"2024-10-18T17:07:30.663Z","dependency_job_id":null,"html_url":"https://github.com/n3M3Z1Z/LDAP-Project","commit_stats":null,"previous_names":["n3m3z1z/ldap-project"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/n3M3Z1Z%2FLDAP-Project","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/n3M3Z1Z%2FLDAP-Project/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/n3M3Z1Z%2FLDAP-Project/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/n3M3Z1Z%2FLDAP-Project/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/n3M3Z1Z","download_url":"https://codeload.github.com/n3M3Z1Z/LDAP-Project/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247006667,"owners_count":20868033,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bash","cyber-security","incident-response","json","ldap-server","linux","pdf","python","threat-dragon","vagrantfile","virtualbox"],"created_at":"2024-10-29T02:04:21.473Z","updated_at":"2026-05-03T17:34:34.856Z","avatar_url":"https://github.com/n3M3Z1Z.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"![hamster_panzer](https://github.com/user-attachments/assets/0c4ee02d-8707-44fe-98b4-a3ef180e4be1)\n\n\nThis repository contains our final project for the Specialist in System Administration and Cyber Security program. The mentioned company and all individuals are purely fictional. We decided to make our project public on GitHub because this project would not have been possible without the open-source community. All products used align with the philosophy of free access and the use of resources at no cost.\n\nFeel free to clone the repository and try it on your own, commit to it adjust it or just enjoy reading it.\n                                                                                                                                 \n\n# LDAP-Project\nA simple and Basic LDAP-Server, and Server hardening\n\n\n### LDAP Server Setup - hamster.panzer\nProject Overview\nThis repository contains the necessary configuration and setup for an LDAP server hosted on an Ubuntu Biotic virtual machine. The LDAP server is configured for the domain hamster.panzer with an IP address of 192.168.56.100. The project includes pre-configured security services and tools for managing user authentication and system access.\n\nRequirements\nBefore setting up the LDAP server, ensure you have the following software installed on your local machine:\n\nVagrant\nVirtualBox\nThese tools are essential for provisioning and managing the virtual machine where the LDAP server and associated services will run.\n\nSetup Instructions\nStep 1: Clone the Repository\nStart by cloning this repository to your local machine:\n\ngit clone https://github.com/n3m3z1z/LDAP-Project.git\ncd ldap-server-hamster-panzer\nStep 2: Start the Vagrant Environment\nThe Vagrantfile included in this repository is configured to set up the required virtual environment. To start the environment, run:\n\nvagrant up\nThis command will download the base Ubuntu Biotic box if not already present and provision the virtual machine with the LDAP server and all required security services.\n\nStep 3: Access the Virtual Machine\nOnce the Vagrant environment is up, you can start the server VM in Virtualbox.\n\nStep 4: LDAP Server Details\nDomain Name: hamster.panzer\nIP Address: 192.168.56.100\nLDAP Services: No pre-configuration you are free to follow our guide provided in the Documentation.pdf as well as the Guide.pdf\nStep 5: Security Software\nThe following security tools are to be installed, to secure the LDAP-Server:\n\nClamAV (Antivirus)\nFail2Ban (Brute-force protection)\nRKHunter (Rootkit detection)\nUFW (Firewall)\nAppArmor (Mandatory Access Control)\nSnort (Intrusion detection)\nSuricata (Network-based IDS/IPS)\nEach of these tools has been configured for basic operation. For more detailed configurations and usage instructions, refer to the Documentation.\n\nHardening and Threat Modeling https://github.com/OWASP/threat-dragon\nHardening\nSSH Configuration: Ensure strong password policies, disable root login, and use key-based authentication.\nFirewall Rules: Restrict access to only necessary ports using UFW.\nRegular Updates: Keep the system and all software packages updated to minimize vulnerabilities.\nUser Privileges: Follow the principle of least privilege when assigning user permissions.\nThreat Modeling with Thraet-Dragon-ng\nIdentify Assets: User data, authentication mechanisms, and sensitive information stored in the LDAP directory.\nIdentify Threats: Unauthorized access, data leakage, and service disruptions.\nAssess Risks: Evaluate the likelihood and impact of identified threats, and implement appropriate mitigations.\nIncident Response Plan\nIncident Reporting\nEstablish a procedure for staff to report security incidents via email.\nEmail address for incident reports: security@hamster.panzer.\nIncident Response Steps\nIdentification: Confirm the incident and gather relevant information.\nContainment: Limit the impact of the incident.\nEradication: Remove the cause of the incident.\nRecovery: Restore affected systems and services.\nLessons Learned: Conduct a post-incident review to improve future responses.\nIncident Reports\nMaintain detailed records of all incidents, including:\n\nDate and time of the incident\nDescription of the incident\nSteps taken in response\nResolution and follow-up actions\nDocumentation\nAll PDFs related to this project are currently in German. An English version will follow soon. Please refer to the documentation for in-depth details on the setup and management of the LDAP server.\n\nFor further information or questions, please contact the project maintainers.\n\n![hamster_tank](https://github.com/user-attachments/assets/993c6bba-b231-4de1-8bfc-2d9b4781f618)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fn3m3z1z%2Fldap-project","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fn3m3z1z%2Fldap-project","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fn3m3z1z%2Fldap-project/lists"}