openstack/ansible-hardening
Code Issues Proposed changes
75c06173c7
ansible-hardening/doc/metadata/rhel6/V-38625.rst
Major Hayden 3c19f00a7f [Docs] Metadata cleanup 
This patch adds the right tags to each piece of metadata and corrects
small errors found in the deployer notes.

Closes-bug: 1595669
Change-Id: Ic04aaad85ebf111be5a0bdb01a350442fdea1433
2016-09-12 14:27:49 -05:00

496 B
Raw Blame History

---id: V-38625 status: exception - manual intervention tag: auth ---

Deployers that use LDAP authentication for systems are strongly urged to use TLS connectivity between client hosts and LDAP servers to prevent eavesdroppers on the network from reading the authentication attempts as they are made. The certificates on the LDAP server must be trusted by each client.

The tasks in the security role do not adjust the LDAP configuration since this could disrupt future authentication attempts.