[PATCH 11/16] changed HOWTO information for OpenLDAP server to Groups

David Smith dsmith at eclipse.ncsc.mil
Fri Sep 21 22:11:12 UTC 2012


Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
 RHEL6/input/services/ldap.xml |   22 +++++++++++-----------
 1 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/RHEL6/input/services/ldap.xml b/RHEL6/input/services/ldap.xml
index 6c2bebf..3ee8b64 100644
--- a/RHEL6/input/services/ldap.xml
+++ b/RHEL6/input/services/ldap.xml
@@ -188,7 +188,7 @@ LDAP server process would need to be restarted manually whenever the server rebo
 <ref nist="AC-6, CM-7, SC-11, SC-12, SC-13, SC-17" />
 </Rule>
 
-<Rule id="ldap_server_config_directory_domain">
+<Group id="ldap_server_config_directory_domain">
 <title>Create Top-level LDAP Structure for Domain</title>
 <description>Create a structure for the domain itself with at least the following attributes:
 <pre>dn: dc=example,dc=com
@@ -202,9 +202,9 @@ any other entries for the domain.
 <!--<ident cce="TODO:CCE" />-->
 <!--oval id="MANUAL AUDIT" /-->
 <ref nist="AC-2" />
-</Rule>
+</Group>
 
-<Rule id="ldap_server_config_directory_users_groups">
+<Group id="ldap_server_config_directory_users_groups">
 <title>Create LDAP Structures for Users and Groups</title>
 <description>Create LDAP structures for people (users) and for groups with at least the following attributes:
 <pre>dn: ou=people,dc=example,dc=com
@@ -221,9 +221,9 @@ These organizational units are used to identify the two categories within LDAP.
 <!--<ident cce="TODO:CCE" />-->
 <!--oval id="MANUAL AUDIT" /-->
 <ref nist="AC-2, AC-6, SC-2" />
-</Rule>
+</Group>
 
-<Rule id="ldap_server_config_directory_accounts">
+<Group id="ldap_server_config_directory_accounts">
 <title>Create Unix Accounts</title>
 <description>For each Unix user, create an LDAP entry with at least the following attributes (others may be appropriate
 for your site as well), using variable values appropriate to that user.
@@ -251,9 +251,9 @@ but only for user accounts which are to be shared across machines, and which hav
 <!--<ident cce="TODO:CCE" />-->
 <!--oval id="MANUAL AUDIT" /-->
 <ref nist="AC-2, CM-7, SC-2" />
-</Rule>
+</Group>
 
-<Rule id="ldap_server_config_directory_groups">
+<Group id="ldap_server_config_directory_groups">
 <title>Create Unix Groups</title>
 <description>For each Unix group, create an LDAP entry with at least the following attributes:
 <pre>dn: cn=groupname ,ou=groups,dc=example,dc=com
@@ -274,11 +274,11 @@ or which are shared across systems.
 <!--<ident cce="TODO:CCE" />-->
 <!--oval id="MANUAL AUDIT" /-->
 <ref nist="AC-2, CM-7, SC-2" />
-</Rule>
+</Group>
 
-<Rule id="ldap_server_config_directory_admin_group">
+<Group id="ldap_server_config_directory_admin_group">
 <title>Create Groups to Administer LDAP</title>
-<description>If a group of LDAP administrators, admins , is desired, that group must be created somewhat differently.
+<description>If a group of LDAP administrators is desired, that group must be created somewhat differently.
 The specification should have these attributes:
 <pre>dn: cn=admins ,ou=groups,dc=example,dc=com
 cn: admins
@@ -297,7 +297,7 @@ auditing and error detection, it is recommended that LDAP administrators have un
 <!--<ident cce="TODO:CCE" />-->
 <!--oval id="MANUAL AUDIT" /-->
 <ref nist="AC-2, CM-7, SC-2" />
-</Rule>
+</Group>
 
 <Rule id="ldap_server_config_olcaccess">
 <title>Configure slapd to Protect Authentication Information</title>
-- 
1.7.1



More information about the scap-security-guide mailing list