Ensure LDAP is not enabled The Lightweight Directory Access Protocol (LDAP) was introduced as a replacement for NIS/YP. It is a service that provides a method for looking up information from a central database.

Parameter:

Technical Mechanism: If the server will not need to act as an LDAP client or server, it is recommended that the software be disabled to reduce the potential attack surface. Fix: Uninstall the slapd package: # apt-get purge slapd

References: