TMA-DB2-5.1

Specify a Secure Connection Authentication Type (SRVCON_AUTH)

높음레벨 1수동 검토db2

설명

The SRVCON_AUTH database manager configuration parameter specifies how and where authentication takes place for incoming connections to the database. This parameter overrides the AUTHENTICATION parameter. This parameter can take on any of the following values: ; NOT_SPECIFIED ; SERVER ; SERVER_ENCRYPT ; KERBEROS ; KRB_SERVER_ENCRYPT ; GSSPLUGIN ; GSS_SERVER_ENCRYPT ; SERVER_ENCRYPT_TOKEN ...

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command: db2 => get database manager configuration 3. Locate the SRVCON_AUTH value in the output: Server Connection Authentication (SRVCON_AUTH) = SERVER Any value other than CLIENT is acceptable.

조치 방법

조치 방식: 가이드 또는 인프라 패치

1. Attach to the Db2 instance db2 => attach to <db2instance> 2. Run the following command: db2 => update database manager configuration parameter using srvcon_auth <authentication type> 3. Restart the Db2 instance. db2 => db2stop db2 => db2start Refer to the 'encryption of data in motion' section for more information about using SSL for client-server communication.

속성

운영 체제: 모두
태그: db2databasemanual
참고 자료: CIS IBM Db2 12.1 Benchmark v1.0.0 - 5.1 Specify a Secure Connection Authentication Type (SRVCON_AUTH)