Detections
Analytics
AIX7-00-001046 - If LDAP authentication is required, AIX must setup LDAP client to refresh user and group caches less than a day.
Information
If cached authentication information is out-of-date, the validity of the authentication information may be questionable.Solution
Edit the "/etc/security/ldap/ldap.cfg" file to set the following two keywords to have value of "900":usercachetimeout
groupcachetimeout
Restart LDAP client using command:
# /usr/sbin/restart-secldapclntd
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R2_STIG.zip
Item Details
Audit Name: DISA IBM AIX 7.x STIG v3r2
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-5(13), CAT|II, CCI|CCI-002007, Rule-ID|SV-215205r958828_rule, STIG-ID|AIX7-00-001046, STIG-Legacy|SV-101645, STIG-Legacy|V-91547, Vuln-ID|V-215205
Plugin: Unix
Control ID: dd980531735e0b920c37013d4b5fcc4feedf87001194dc49bf090b8dde026cf8