TMA-OPNSENSE-2.2
Ensure LDAP or RADIUS server configured
HighLevel 1Automatedopnsense
Description
Configured the LDAP Servers or Radius server for central authentication. Authentication, authorization and accounting (AAA) scheme provide an authoritative source for managing and monitoring access for devices.
How it is checked
Audit method: Configuration pattern
- Pattern
<authserver>(?:[^<]|<[^/<]|</[^a<]|</a[^u<]|</au[^t<]|</aut[^h<]|</auth[^s<]|</auths[^e<]|</authse[^r<]|</authser[^v<]|</authserv[^e<]|</authserve[^r<]|</authserver[^><])*?<type>(?:ldap|radius)</type>
How it is fixed
Fix method: Guidance or infrastructure patch
In the GUI: - Navigate to System > Access > Servers - Click the Orange Plus sign in the top right - Enter the details needed for your LDAP server - Click 'Save' at the bottom
Properties
- Operating systems
- Any
- Tags
- opnsense
- Reference
- CIS OPNsense Benchmark v1.0.0 - 2.2 Ensure LDAP or RADIUS server configured
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target opnsense