TMA-DB2-5.8
DB2DOMAINLIST Registry Variable (Windows only)
Descripción
This registry variable is only active is the authentication parameter is set to CLIENT which is not a recommended setting as discussed in section 6.2. It is possible to have a user id be represented across multiple domains. Issues could arise when trying to authenticate such a user id. To prevent these issues, a listing of domains should be defined within the DB2DOMAINLIST registry variable. ...
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
Verify that the DB2DOMAINLIST registry variable includes only the appropriate domains by running the following command: db2set -all
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Run the following command to set the DB2DOMAINLIST registry variable to the appropriate domains: db2set DB2DOMAINLIST=<ordered list of domains separated by comma>
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- db2databasemanual
- Referencia
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 5.8 DB2DOMAINLIST Registry Variable (Windows only)