TMA-DB2-5.9
DB2AUTH Registry Variable
Description
The DB2AUTH registry variable is used to control various authentication related behaviors in Db2. The following settings are recommended for this registry variable: 1. Use DISABLE_CHGPASS which disables the ability to change a user's password from the client. 2. Use JCC_ENFORCE_SECMEC which enforces that the Db2 server does not accept a clear text password security mechanism when using ...
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify that the DB2AUTH registry variable is set to the appropriate values by running the following command: db2set -all
How it is fixed
Fix method: Guidance or infrastructure patch
Run the following command to set the DB2AUTH registry variable to the appropriate values: db2set DB2AUTH=<comma separated values>
Properties
- Operating systems
- Any
- Tags
- db2databasemanual
- Reference
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 5.9 DB2AUTH Registry Variable