IF LDAP is used, AIX LDAP client must use SSL to authenticate with LDAP server.
An XCCDF Rule
Description
While LDAP client's authentication type is ldap_auth (server-side authentication), the client sends password to the server in clear text for authentication. SSL must be used in this case.
- ID
- SV-215204r987796_rule
- Version
- AIX7-00-001045
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Edit the "/etc/security/ldap/ldap.cfg" file to have the following line:
useSSL:yes
Configure the LDAP server and LDAP client to use the SSL according to AIX LDAP documentation.
Restart the client daemon:
# restart-secldapclntd