All Questions
2 questions
2
votes
2
answers
396
views
For PCI compliance, is a central Auth required for domain and non-domain security principles?
We have a Saas offering that is hosted within our own data centers. Our software offering utilizes OpenLDAP as it backing for token auth security. Our operations team has asserted that for PCI ...
- 21
1
vote
1
answer
2k
views
LDAP and anonymous bind for PCI compliance
We have to setup a central auth for PCI compliance and I'm wondering if it's ok to allow anonymous bind or should I create a user to do the bind for the services needing ldap?
- 165