Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
LDAP authentication must be secured.
Description
Discussion Text
JNDIRealm is an implementation of the Tomcat Realm interface. Tomcat uses the JNDIRealm to look up users in an LDAP directory server. The realm's connection to the directory is defined by the 'connectionURL' configuration attribute. This attribute is usually an LDAP URL that specifies the domain name of the directory server to connect to.
The LDAP URL does not provide encryption by default. This can lead to authentication credentials being transmitted across network connections in clear text.
To address this risk, Tomcat must be configured to use secure LDAP (LDAPS).
The LDAP URL does not provide encryption by default. This can lead to authentication credentials being transmitted across network connections in clear text.
To address this risk, Tomcat must be configured to use secure LDAP (LDAPS).
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.