IF LDAP is used, AIX LDAP client must use SSL to authenticate with LDAP server.
An XCCDF Rule
Description
<VulnDiscussion>While LDAP client's authentication type is ldap_auth (server-side authentication), the client sends password to the server in clear text for authentication. SSL must be used in this case.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-215204r987796_rule
- Severity
- High
- References
- Updated
Remediation - Manual Procedure
Edit the "/etc/security/ldap/ldap.cfg" file to have the following line:
useSSL:yes
Configure the LDAP server and LDAP client to use the SSL according to AIX LDAP documentation.
Restart the client daemon: