documentation_complete: true

prodtype: rhel7

title: 'Disable LDAP Support'

description: |-
    The <tt>ldap</tt> module provides HTTP authentication via an LDAP directory.
    If its functionality is unnecessary, comment out the related modules:
    <pre>#LoadModule ldap_module modules/mod_ldap.so
    #LoadModule authnz_ldap_module modules/mod_authnz_ldap.so</pre>
    If LDAP is to be used, SSL encryption should be used as well.

rationale: |-
    Minimizing the number of loadable modules available to the web server reduces risk
    by limiting the capabilities allowed by the web server.

severity: unknown

identifiers:
    cce@rhel7: 80306-4
