Detections
Analytics

1.399 RHEL-10-701280

Information

RHEL 10 must map the authenticated identity to the user or group account for public key infrastructure (PKI)-based authentication.

GROUP ID: V-281330RULE ID: SV-281330r1167140

Without mapping the certificate used to authenticate to the user account, the ability to determine the identity of the individual user or group will not be available for forensic analysis.

Solution

Configure RHEL 10 to map the authenticated identity to the user or group account by adding or modifying the certmap section of the "/etc/sssd/sssd.conf" file based on the following example:

[certmap/testing.test/rule_name]matchrule = .*EDIPI@milmaprule = (userCertificate;binary={cert!bin})domains = testing.test

Restart the "sssd" service with the following command for the changes to take effect:

$ sudo systemctl restart sssd.service

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(2), CAT|II, CCI|CCI-000187, Rule-ID|SV-281330r1167140_rule, STIG-ID|RHEL-10-701280, Vuln-ID|V-281330

Plugin: Unix

Control ID: 0837e464d328649aedc67d63f0fb2394e97b2f252916cc633cebfada45db1b4c