AIX7-00-002107 - AIX must disable Kerberos Authentication in ssh config file to enforce access restrictions.

Information

Without auditing the enforcement of access restrictions against changes to the application configuration, it will be difficult to identify attempted attacks and an audit trail will not be available for forensic investigation for after-the-fact actions.

Enforcement actions are the methods or mechanisms used to prevent unauthorized changes to configuration settings. Enforcement action methods may be as simple as denying access to a file based on the application of file permissions (access restriction). Audit items may consist of lists of actions blocked by access restrictions or changes identified after the fact.

Solution

Edit the "/etc/ssh/sshd_config" file and add or change the "KerberosAuthentication" value of the setting to "no".

Refresh sshd:
# stopsrc -s sshd
# startsrc -s sshd

Item Details

Audit Name: DISA IBM AIX 7.x STIG v3r2

Category: CONFIGURATION MANAGEMENT

Plugin: Unix

Control ID: 307903934b5267247bee1fa2af4d8a8782a29c981a18928185871928e85fb6e1

Detections

Analytics

AIX7-00-002107 - AIX must disable Kerberos Authentication in ssh config file to enforce access restrictions.

Information

Solution

See Also

Item Details