[PATCH 11/16] Mapped CCI-001453 to ldap_client_start_tls and ldap_client_tls_cacertpath 1453 requires encrypted comms, this is enforced when using LDAP by implimenting TLS

Shawn Wells shawn at redhat.com
Wed Jul 18 18:21:26 UTC 2012


---
 RHEL6/input/services/ldap.xml |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/services/ldap.xml b/RHEL6/input/services/ldap.xml
index 1314691..58e4553 100644
--- a/RHEL6/input/services/ldap.xml
+++ b/RHEL6/input/services/ldap.xml
@@ -35,7 +35,7 @@ Then review the LDAP server and ensure TLS has been configured.
 <rationale>The ssl directive specifies whether to use ssl or not. If
 not specified it will default to no. It should be set to start_tls rather
 than doing LDAP over SSL.</rationale>
-<ref disa="776,778" />
+<ref disa="776,778,1453" />
 <ident cce="14894-0" />
 <oval id="ldap_client_start_tls" />
 </Rule>
@@ -55,7 +55,7 @@ Then review the LDAP server and ensure TLS has been configured.
 tls_cheekpeer is configured (which is the default for openldap versions 2.1 and
 up). These directives define the path to the trust certificates signed by the
 site CA.</rationale>
-<ref disa="776,778" />
+<ref disa="776,778,1453" />
 <ident cce="14894-0" />
 <oval id="ldap_client_tls_cacertpath" />
 </Rule>
-- 
1.7.1


--OgqxwSJOaUobr8KG--


More information about the scap-security-guide mailing list