+APP.2.3.A3 Secure Configuration of OpenLDAP (B)

APP.2.3.A3 Secure Configuration of OpenLDAP (B)

Secure configuration of OpenLDAP requires a correctly configured slapd server. The client applications used MUST also be securely configured. When configuring OpenLDAP, the permissions MUST be set correctly in the operating system. The default values of all relevant OpenLDAP configuration directives MUST be checked and adapted if necessary. The back ends and overlays of OpenLDAP MUST be included in the configuration. Appropriate time and size restrictions MUST be set for searching within OpenLDAP. The configuration on the slapd server MUST be checked after each change.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.15 Eavesdropping
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems