Detections
Analytics

AIX7-00-001045 - IF LDAP is used, AIX LDAP client must use SSL to authenticate with LDAP server.

Information

While LDAP client's authentication type is ldap_auth (server-side authentication), the client sends password to the server in clear text for authentication. SSL must be used in this case.

Solution

Edit the "/etc/security/ldap/ldap.cfg" file to have the following line:
useSSL:yes

Configure the LDAP server and LDAP client to use the SSL according to AIX LDAP documentation.

Restart the client daemon:
# restart-secldapclntd

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R2_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)(c), CAT|I, CCI|CCI-000197, Rule-ID|SV-215204r987796_rule, STIG-ID|AIX7-00-001045, STIG-Legacy|SV-101395, STIG-Legacy|V-91297, Vuln-ID|V-215204

Plugin: Unix

Control ID: 8a52f89bc86bfc87d4a560821a6c87202fb4080f75b3a74c0e8522f36bd33b62