Cis Ubuntu1204 V110 6 6

Ensure LDAP is not enabled

cyberstrikeus Updated

File contents

6.6 Ensure LDAP is not enabled (Not Scored)

Profile Applicability

  • Level 1

Description

The Lightweight Directory Access Protocol (LDAP) was introduced as a replacement for NIS/YP. It is a service that provides a method for looking up information from a central database.

Rationale

If the server will not need to act as an LDAP client or server, it is recommended that the software be disabled to reduce the potential attack surface.

Audit Procedure

Using Command Line

Run the following command:

dpkg -s slapd

Expected Result

Ensure package status is not-installed or dpkg returns no info is available.

Remediation

Using Command Line

Uninstall the slapd package:

apt-get purge slapd

Default Value

Not installed by default on Ubuntu 12.04 LTS Server.

References

Profile

Level 1 - Not Scored

cyberstrikeus/cyberstrike/tree/main/.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-12-04-lts-server-benchmark/cis-ubuntu1204-v110-6-6 commit 82d8628d62

Frequently asked questions

npx skillmds@latest add cyberstrikeus/cis-ubuntu1204-v110-6-6