The storage system must only be operated in conjunction with an LDAP server in a trusted environment if an Active Directory server is not available.

An XCCDF Rule

Description

Where strong account and password management capabilities are required, the 3PAR system is heavily dependent on its ability to use an LDAP server. Satisfies: SRG-OS-000001-GPOS-00001, SRG-OS-000104-GPOS-00051, SRG-OS-000480-GPOS-00227

ID: SV-237825r647884_rule
Version: HP3P-32-001503
Severity: High
References: CCI-000015 CCI-000366 CCI-000764
Updated: 23 days ago

Remediation Templates

Use this series of commands to configure LDAP.

cli% setauthparam -f ldap-server        <ldap server IP address>
cli% setauthparam -f ldap-server-hn     <fully qualified domain name of ldap server, such as ldapserver.thisdomain.com>
cli% setauthparam -f binding            simple
cli% setauthparam -f ldap-StartTLS      requirecli% setauthparam -f groups-dn          ou=Groups,dc=thisdomain,dc=com
cli% setauthparam -f user-dn-base       ou=People,dc=thisdomain,dc=com
cli% setauthparam -f user-attr          uid
cli% setauthparam -f group-obj          groupofuniquenames
cli% setauthparam -f group-name-attr    cn
cli% setauthparam -f member-attr        uniqueMember
cli% setauthparam -f browse-map         "*"
cli% setauthparam -f edit-map           <customer-assigned name of edit role> <customer-assigned name of "edit" group>
cli% setauthparam -f service-map       <customer-assigned name of service role> <customer-assigned name of "service" group>
cli% setauthparam -f super-map          <customer-assigned name of super role> <customer-assigned name of "super" group>

The storage system must only be operated in conjunction with an LDAP server in a trusted environment if an Active Directory server is not available.

Description

Remediation Templates

A Manual Procedure