Skip to content

0106-openldapclients-uninstalled - LDAP Clients Installed

Rule ID

  • 0106-openldapclients-uninstalled

Category

  • system

Level

  • warn

Compatible Versions

  • Linux

Description

  • Lightweight Directory Access Protocol (LDAP) was introduced as an alternative to NIS/YP. It is a service that provides a method for looking up information from a central database.

Scan Frequency

  • 00 */30 * * *

Rationale

  • If the system does not need to act as an LDAP client, it is recommended to remove the software to reduce the potential attack surface.

Risk Items

  • Hacker infiltration
  • Data breach
  • Network security
  • Mining risk
  • Botnet risk

Audit Method

  • Run the following command to verify that the openldap-clients packages are not installed:
 # rpm -q openldap-clients
package openldap-clients is not installed

Remediation

  • Run the following command to remove the openldap-clients packages:
# yum remove openldap-clients

Impact

  • Many insecure service clients are used as troubleshooting tools and in test environments. Removing them may inhibit the ability to test and troubleshoot. If needed, it is recommended to remove the client after use to prevent accidental or intentional misuse.

Default Value

References

CIS Controls

  • Version 7
    9.2 Ensure Only Approved Ports, Protocols, and Services Are Running
    Ensure that only network ports, protocols, and services listening on a system with validated business needs are running on each system.

Feedback

Is this page helpful?