# LDAP password keystore

**URL:** <https://forum.opensearch.org/t/ldap-password-keystore/1341>\
**Category:** Open Source Elasticsearch and Kibana\
**Created:** [August 16, 2019, 2:13pm UTC](https://forum.opensearch.org/t/ldap-password-keystore/1341 "2019-08-16T14:13:16Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ivan](https://avatars.discourse-cdn.com/v4/letter/i/df788c/32.png) [@Ivan](https://forum.opensearch.org/u/Ivan)\
**Post date:** [August 16, 2019, 2:13pm UTC](https://forum.opensearch.org/t/ldap-password-keystore/1341/1 "2019-08-16T14:13:16Z")

</div>

Hi all,

Is there way how can I store LDAP password securely?

For example in keystore or variable?

Many thanks.

---

<div class="post-metadata">

**Author:** ![lukol](https://avatars.discourse-cdn.com/v4/letter/l/858c86/32.png) [@lukol](https://forum.opensearch.org/u/lukol)\
**Post date:** [September 9, 2019, 9:46am UTC](https://forum.opensearch.org/t/ldap-password-keystore/1341/2 "2019-09-09T09:46:19Z")

</div>

Hi  
Good question, I also want to know:  
Is there any possibility to encrypt LDAP password in configuration file?

Anyone know?

---

<div class="post-metadata">

**Author:** ![ciyaresh](https://avatars.discourse-cdn.com/v4/letter/c/3da27b/32.png) [@ciyaresh](https://forum.opensearch.org/u/ciyaresh)\
**Post date:** [February 17, 2020, 4:51pm UTC](https://forum.opensearch.org/t/ldap-password-keystore/1341/3 "2020-02-17T16:51:19Z")

</div>

Hi,

Were you able to find the answer?

---

<div class="post-metadata">

**Author:** ![gferrette](https://avatars.discourse-cdn.com/v4/letter/g/bbce88/32.png) [@gferrette](https://forum.opensearch.org/u/gferrette)\
**Post date:** [December 17, 2021, 4:55pm UTC](https://forum.opensearch.org/t/ldap-password-keystore/1341/4 "2021-12-17T16:55:29Z")

</div>

Hello!

Please, is it possible to encrypt the LDAP password in config file?

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [December 29, 2021, 3:30pm UTC](https://forum.opensearch.org/t/ldap-password-keystore/1341/5 "2021-12-29T15:30:01Z")

</div>

@gferrette @Ivan @lukol @ciyaresh

Unfortunately, LDAP password can be passed either as plain text or environmental variable with config.yml

There is a GitHub case opened already for this issue.  
[https://github.com/opensearch-project/security/issues/173](https://github.com/opensearch-project/security/issues/173)