TMA-DB2-5.8
DB2DOMAINLIST Registry Variable (Windows only)
Description
This registry variable is only active is the authentication parameter is set to CLIENT which is not a recommended setting as discussed in section 6.2. It is possible to have a user id be represented across multiple domains. Issues could arise when trying to authenticate such a user id. To prevent these issues, a listing of domains should be defined within the DB2DOMAINLIST registry variable. ...
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify that the DB2DOMAINLIST registry variable includes only the appropriate domains by running the following command: db2set -all
How it is fixed
Fix method: Guidance or infrastructure patch
Run the following command to set the DB2DOMAINLIST registry variable to the appropriate domains: db2set DB2DOMAINLIST=<ordered list of domains separated by comma>
Properties
- Operating systems
- Any
- Tags
- db2databasemanual
- Reference
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 5.8 DB2DOMAINLIST Registry Variable (Windows only)