TMAegis
Más reglas para db2

TMA-DB2-5.8

DB2DOMAINLIST Registry Variable (Windows only)

MediaNivel 1Revisión manualdb2

Descripción

This registry variable is only active is the authentication parameter is set to CLIENT which is not a recommended setting as discussed in section 6.2. It is possible to have a user id be represented across multiple domains. Issues could arise when trying to authenticate such a user id. To prevent these issues, a listing of domains should be defined within the DB2DOMAINLIST registry variable. ...

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Verify that the DB2DOMAINLIST registry variable includes only the appropriate domains by running the following command: db2set -all

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Run the following command to set the DB2DOMAINLIST registry variable to the appropriate domains: db2set DB2DOMAINLIST=<ordered list of domains separated by comma>

Propiedades

Sistemas operativos
Cualquiera
Etiquetas
db2databasemanual
Referencia
CIS IBM Db2 12.1 Benchmark v1.0.0 - 5.8 DB2DOMAINLIST Registry Variable (Windows only)