← Back to Red Hat Ansible Automation Controller Application Server Security Technical Implementation Guide

V-256907

CAT II (Medium)

Automation Controller must utilize encryption when using LDAP for authentication.

Rule ID

SV-256907r903514_rule

STIG

Red Hat Ansible Automation Controller Application Server Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000197

Discussion

To avoid access with malicious intent, passwords will need to be protected at all times. This includes transmission where passwords must be encrypted for security.

Check Content

Log in to Automation Controller as an administrator and navigate to Settings >> Authentication >> LDAP settings.

If an LDAP server is configured but the "LDAP SERVER URI" field does not start with "ldaps://", this is a finding.

Fix Text

Log in to Automation Controller as an administrator and navigate to Settings >> Authentication >> LDAP settings.<br /><br />Click "Edit".<br /><br />Modify the "LDAP SERVER URI" field so that it begins with "ldaps://".<br /><br />Click "Save".