TMA-DB2-5.8

DB2DOMAINLIST Registry Variable (Windows only)

中レベル 1手動レビューdb2

説明

This registry variable is only active is the authentication parameter is set to CLIENT which is not a recommended setting as discussed in section 6.2. It is possible to have a user id be represented across multiple domains. Issues could arise when trying to authenticate such a user id. To prevent these issues, a listing of domains should be defined within the DB2DOMAINLIST registry variable. ...

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Verify that the DB2DOMAINLIST registry variable includes only the appropriate domains by running the following command: db2set -all

修正方法

修正方法: ガイダンスまたは IaC パッチ

Run the following command to set the DB2DOMAINLIST registry variable to the appropriate domains: db2set DB2DOMAINLIST=<ordered list of domains separated by comma>

プロパティ

オペレーティングシステム: すべて
タグ: db2databasemanual
参照: CIS IBM Db2 12.1 Benchmark v1.0.0 - 5.8 DB2DOMAINLIST Registry Variable (Windows only)