0106-openldapclients-uninstalled - LDAP Clients Installed
Rule ID
- 0106-openldapclients-uninstalled
Category
Level
Compatible Versions
Description
- Lightweight Directory Access Protocol (LDAP) was introduced as an alternative to NIS/YP. It is a service that provides a method for looking up information from a central database.
Scan Frequency
Rationale
- If the system does not need to act as an LDAP client, it is recommended to remove the software to reduce the potential attack surface.
Risk Items
- Hacker infiltration
- Data breach
- Network security
- Mining risk
- Botnet risk
Audit Method
- Run the following command to verify that the openldap-clients packages are not installed:
# rpm -q openldap-clients
package openldap-clients is not installed
- Run the following command to remove the openldap-clients packages:
# yum remove openldap-clients
Impact
- Many insecure service clients are used as troubleshooting tools and in test environments. Removing them may inhibit the ability to test and troubleshoot. If needed, it is recommended to remove the client after use to prevent accidental or intentional misuse.
Default Value
References
CIS Controls
- Version 7
9.2 Ensure Only Approved Ports, Protocols, and Services Are Running
Ensure that only network ports, protocols, and services listening on a system with validated business needs are running on each system.