>From f52e5d1871f5a2d21ceb9d793caaf6492e814a4e Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Wed, 18 Jul 2012 14:21:26 -0400 Subject: [PATCH 11/16] Mapped CCI-001453 to ldap_client_start_tls and ldap_client_tls_cacertpath 1453 requires encrypted comms, this is enforced when using LDAP by implimenting TLS --- RHEL6/input/services/ldap.xml | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/RHEL6/input/services/ldap.xml b/RHEL6/input/services/ldap.xml index 1314691..58e4553 100644 --- a/RHEL6/input/services/ldap.xml +++ b/RHEL6/input/services/ldap.xml @@ -35,7 +35,7 @@ Then review the LDAP server and ensure TLS has been configured. The ssl directive specifies whether to use ssl or not. If not specified it will default to no. It should be set to start_tls rather than doing LDAP over SSL. - + @@ -55,7 +55,7 @@ Then review the LDAP server and ensure TLS has been configured. tls_cheekpeer is configured (which is the default for openldap versions 2.1 and up). These directives define the path to the trust certificates signed by the site CA. - + -- 1.7.1