While working on Internal PT for PCI DSS compliance, it flags that LDAP (389 server, FreeIPA) the anonymous bind is allowing listing list of user accounts.
Many searches are leading to setting up
But changing this appears to be breaking the authentication at the clients using this LDAP server for authentication.
getent does not return any information.
How should we secure the LDAP server while making sure that the central authentication continues to work properly?