Cisco / Jun 2025 – Sept 2025

Cisco ASA LDAP Auth Modernization

Modernized Cisco ASA LiNA LDAP authentication by extracting a Linux agent; moved to upstream OpenLDAP, closed 45+ CVEs, and made authentication 5x faster.

resume
timelineJun 2025 - Sep 2025
focussystems, security, devops
stack
  • C
  • Linux
  • OpenLDAP

problem

ASA LiNA depended on a heavily customized OpenLDAP fork that carried security exposure, maintenance cost, and slow authentication.

approach

Separated LDAP authentication from the legacy OS subsystem into a standalone Linux agent and replaced the custom fork with upstream OpenLDAP.

impact

  • Closed 45+ CVEs
  • Replaced heavily customized fork with upstream OpenLDAP
  • Reduced authentication latency by 5x
cves closed
45
latency improvement
5x