Ensure a management LDAP/Active Directory service is configured and enabled with at least one group mapped

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

From the CLI: ; Run the command pureds list management (or pureds list) to display the current directory service configuration. Verify the URI, Base DN, and Bind User fields are correct and the service is enabled. ; Run the command pureds role list to confirm that role-group mappings are securely defined for array roles. ; Test the configuration: Run the command pureds test to verify that the array can successfully resolve the URIs, bind to the directory using the credentials, and locate the mapped groups without errors.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

To align with the security recommendations, configure the management directory service with your LDAP/AD server parameters, map your directory groups to Purity//FA roles, and rigorously test the connection before enabling it. From the GUI: ; Navigate to Settings > Access > Users and Policies. ; In the Directory Service panel, select the Array Management button, then click the edit icon. ; Enter your LDAP server URIs (using ldaps:// for encrypted connections), Base DN, Bind User, and Bind Password. Click Save. ; In the Roles section of the panel, click the edit icon.