openstack/openstack-ansible-security
Code Issues Proposed changes
fe39a30c98
openstack-ansible-security/doc/metadata/rhel6/V-38626.rst
Andy McCrae fe39a30c98 Revert "Retire openstack-ansible-security" 
This reverts commit ea9b39d723.
In order to release stable/pike we need this to still be present.
https://review.openstack.org/#/c/502063/ is failing.

Once we release stable/pike we can figure out how to properly remove
this repository.

Change-Id: I50308b1c3001371d4554b6c2640bd5384e870a53
2017-09-13 10:34:55 -06:00

496 B
Raw Blame History

---id: V-38626 status: exception - manual intervention tag: auth ---

Deployers that use LDAP authentication for systems are strongly urged to use TLS connectivity between client hosts and LDAP servers to prevent eavesdroppers on the network from reading the authentication attempts as they are made. The certificates on the LDAP server must be trusted by each client.

The tasks in the security role do not adjust the LDAP configuration since this could disrupt future authentication attempts.