Ensure a management LDAP/Active Directory service is configured and enabled with at least one group mapped

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

From the CLI: ; Run the command pureds list management (or pureds list) to display the current directory service configuration. Verify the URI, Base DN, and Bind User fields are correct and the service is enabled. ; Run the command pureds role list to confirm that role-group mappings are securely defined for array roles. ; Test the configuration: Run the command pureds test to verify that the array can successfully resolve the URIs, bind to the directory using the credentials, and locate the mapped groups without errors.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

To align with the security recommendations, configure the management directory service with your LDAP/AD server parameters, map your directory groups to Purity//FA roles, and rigorously test the connection before enabling it. From the GUI: ; Navigate to Settings > Access > Users and Policies. ; In the Directory Service panel, select the Array Management button, then click the edit icon. ; Enter your LDAP server URIs (using ldaps:// for encrypted connections), Base DN, Bind User, and Bind Password. Click Save. ; In the Roles section of the panel, click the edit icon.