UBTU-24-100650 - Ubuntu 24.04 LTS must have the "SSSD" package installed.

Information

Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased.

Multifactor authentication requires using two or more factors to achieve authentication.

Factors include:
1) Something a user knows (e.g., password/PIN);
2) Something a user has (e.g., cryptographic identification device, token); and
3) Something a user is (e.g., biometric).

A privileged account is defined as an information system account with authorizations of a privileged user.

Network access is defined as access to an information system by a user (or a process acting on behalf of a user) communicating through a network (e.g., local area network, wide area network, or the internet).

The DOD common access card (CAC) with DOD-approved PKI is an example of multifactor authentication.

Satisfies: SRG-OS-000705-GPOS-00150, SRG-OS-000105-GPOS-00052, SRG-OS-000106-GPOS-00053, SRG-OS-000107-GPOS-00054, SRG-OS-000108-GPOS-00055, SRG-OS-000375-GPOS-00160

Solution

Install the sssd.service and the required pam packages with the following commands:

$ sudo apt install -y sssd

$ sudo apt install -y libpam-sss

$ sudo apt install -y libnss-sss

Item Details

Audit Name: DISA Canonical Ubuntu 24.04 LTS STIG v1r5

Category: IDENTIFICATION AND AUTHENTICATION

Plugin: Unix

Control ID: 87df23ebf09969ead302c1fcaf32390ffdbe6111692b6042b26c746cb7db0ca0

Detections

Analytics

UBTU-24-100650 - Ubuntu 24.04 LTS must have the "SSSD" package installed.

Information

Solution

See Also

Item Details