Detections
Analytics

CD16-00-004200 - PostgreSQL must map the PKI-authenticated identity to an associated user account.

Information

The DOD standard for authentication is DOD-approved PKI certificates. Once a PKI certificate has been validated, it must be mapped to a PostgreSQL user account for the authenticated identity to be meaningful to PostgreSQL and useful for authorization decisions.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure PostgreSQL to map authenticated identities directly to PostgreSQL user accounts.

For information on configuring PostgreSQL to use SSL, refer to supplementary content APPENDIX-G.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CD_Postgres_16_V1R2_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(2)(c), CAT|II, CCI|CCI-000187, Rule-ID|SV-261895r1000690_rule, STIG-ID|CD16-00-004200, Vuln-ID|V-261895

Plugin: Unix

Control ID: 8d82fcbfc9708627980e2e3f43b8b601968443f3e15c9b14941397525980b1a4