UBTU-20-010006 - The Ubuntu operating system must map the authenticated identity to the user or group account for PKI-based authentication.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Without mapping the certificate used to authenticate to the user account, the ability to determine the identity of the individual user or group will not be available for forensic analysis.

Solution

Set 'use_mappers=pwent' in '/etc/pam_pkcs11/pam_pkcs11.conf' or, if there is already a comma-separated list of mappers, add it to the list, separated by comma, and before the null mapper.

If the system is missing an '/etc/pam_pkcs11/' directory and an '/etc/pam_pkcs11/pam_pkcs11.conf', find an example to copy into place and modify accordingly at '/usr/share/doc/libpam-pkcs11/examples/pam_pkcs11.conf.example.gz'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_20-04_LTS_V1R4_STIG.zip

Item Details

References: CAT|I, CCI|CCI-000187, Rule-ID|SV-238201r653778_rule, STIG-ID|UBTU-20-010006, Vuln-ID|V-238201

Plugin: Unix

Control ID: f89e23dc3bf8b0220fddd1f473f9af04e9ab69e6730f033a357c622ea01bce6a