Enable the LDAP Client For Use in Authconfig
An XCCDF Rule
Description
To determine if LDAP is being used for authentication, use the following command:
$ sudo grep -i useldapauth /etc/sysconfig/authconfig
If
USELDAPAUTH=yes, then LDAP is being used. If not, set USELDAPAUTH
to yes.
Rationale
Without cryptographic integrity protections, information can be altered by unauthorized users without detection. The ssl directive specifies whether to use TLS or not. If not specified it will default to no. It should be set to start_tls rather than doing LDAP over SSL.
- ID
- xccdf_org.ssgproject.content_rule_enable_ldap_client
- Severity
- Medium
- References
- Updated