+APP.2.1.A11 Setting Up Access to Directory Services (S)

APP.2.1.A11 Setting Up Access to Directory Services (S)

Access to a directory service SHOULD be configured according to the security policy at hand. If the directory service is used as a server on the Internet, it SHOULD be protected accordingly by a security gateway. If anonymous users are to be granted extended access rights to individual sub-areas of the directory tree, a separate user account (known as a proxy user) SHOULD be created for anonymous access. The access rights for this proxy user SHOULD be assigned in a sufficiently restrictive manner. They SHOULD also be removed completely if the account is no longer needed. To avoid inadvertently releasing sensitive information, the search function of the directory service SHOULD be appropriately limited in accordance with its intended purpose.

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări

Tichete legate

Legături
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.25 Failure of Devices or Systems
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.38 Misuse of Personal Information
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information