Detections
Analytics
GEN008020 - If using LDAP for auth or acct info, the LDAP TLS connection must require a cert that has a valid trust path to a trusted CA.
Information
The NSS LDAP service provides user mappings which are a vital component of system security. Communication between an LDAP server and a host using LDAP for NSS require authentication.Solution
Edit '/etc/ldap.conf' and add or set the 'tls_checkpeer' setting to 'yes'.See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-5(2)(a), CAT|II, CCI|CCI-000185, Group-ID|V-22557, Rule-ID|SV-37632r1_rule, STIG-ID|GEN008020, Vuln-ID|V-22557
Plugin: Unix
Control ID: 616cbaa38ed87d98d9b0abf327be906caaf7244243704ca3d89ae42ee72524fb