Ensure a management LDAP/Active Directory service is configured and enabled with at least one group mapped

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

From the CLI: ; Run the command pureds list management (or pureds list) to display the current directory service configuration. Verify the URI, Base DN, and Bind User fields are correct and the service is enabled. ; Run the command pureds role list to confirm that role-group mappings are securely defined for array roles. ; Test the configuration: Run the command pureds test to verify that the array can successfully resolve the URIs, bind to the directory using the credentials, and locate the mapped groups without errors.

修复方式

修复方法: 操作指南或基础设施补丁

To align with the security recommendations, configure the management directory service with your LDAP/AD server parameters, map your directory groups to Purity//FA roles, and rigorously test the connection before enabling it. From the GUI: ; Navigate to Settings > Access > Users and Policies. ; In the Directory Service panel, select the Array Management button, then click the edit icon. ; Enter your LDAP server URIs (using ldaps:// for encrypted connections), Base DN, Bind User, and Bind Password. Click Save. ; In the Roles section of the panel, click the edit icon.