Ensure a management LDAP/Active Directory service is configured and enabled with at least one group mapped

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

From the CLI: ; Run the command pureds list management (or pureds list) to display the current directory service configuration. Verify the URI, Base DN, and Bind User fields are correct and the service is enabled. ; Run the command pureds role list to confirm that role-group mappings are securely defined for array roles. ; Test the configuration: Run the command pureds test to verify that the array can successfully resolve the URIs, bind to the directory using the credentials, and locate the mapped groups without errors.

조치 방법

조치 방식: 가이드 또는 인프라 패치

To align with the security recommendations, configure the management directory service with your LDAP/AD server parameters, map your directory groups to Purity//FA roles, and rigorously test the connection before enabling it. From the GUI: ; Navigate to Settings > Access > Users and Policies. ; In the Directory Service panel, select the Array Management button, then click the edit icon. ; Enter your LDAP server URIs (using ldaps:// for encrypted connections), Base DN, Bind User, and Bind Password. Click Save. ; In the Roles section of the panel, click the edit icon.