The storage system must only be operated in conjunction with an LDAP server in a trusted environment if an Active Directory server is not available.
An XCCDF Rule
Description
<VulnDiscussion>Where strong account and password management capabilities are required, the 3PAR system is heavily dependent on its ability to use an LDAP server. Satisfies: SRG-OS-000001-GPOS-00001, SRG-OS-000104-GPOS-00051, SRG-OS-000480-GPOS-00227</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-237825r647884_rule
- Severity
- High
- References
- Updated
Remediation - Manual Procedure
Use this series of commands to configure LDAP.
cli% setauthparam -f ldap-server <ldap server IP address>
cli% setauthparam -f ldap-server-hn <fully qualified domain name of ldap server, such as ldapserver.thisdomain.com>
cli% setauthparam -f binding simple
cli% setauthparam -f ldap-StartTLS require