Directory services have numerous functions that support users with very different needs. Incorrect configuration of these numerous functions can lead to unauthorised access to the directory service. If, for example, the default configuration is not sufficiently checked and adapted, authentication information can be transmitted in plain text. Malicious users could tap into unencrypted transmissions of this and other information and misuse it for further attacks.