ansible-hardening/doc/source/developer-notes/V-38625.rst
Major Hayden a841e184de Docs: Update dev notes for Cat 2 controls
This patch updates the documentation for the developer notes associated
with the Cat 2 (Medium) controls applied by the security role.

Partial-bug: 1583744

Change-Id: Ic342f33942521db009185585a21208a4688f6ed3
2016-05-25 11:38:13 -05:00

10 lines
440 B
ReStructuredText

**Exception**
Deployers that use LDAP authentication for systems are strongly urged to use
TLS connectivity between client hosts and LDAP servers to prevent eavesdroppers
on the network from reading the authentication attempts as they are made. The
certificates on the LDAP server must be trusted by each client.
The tasks in the security role do not adjust the LDAP configuration since this
could disrupt future authentication attempts.