User Profile With Non-Expiring Passwords

YüksekDüzey 1Manuel incelemeibm-i

Açıklama

User Profiles with non-expiring passwords are never required to change their password. Non-expiring passwords are security risks because if no automated solution is in place, users are never prompted to change their passwords.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

On a command line, type STRSQL and press Enter Enter the following SQL statement and press Enter. SELECT ALL USER_NAME, STATUS, PWDEXPITV, LASTUSED FROM QSYS2/USER_INFO T01 WHERE PWDEXPITV = -1 AND NOPWD ='NO' Service accounts may be excluded from the audit and remediation. A service account is a user account that is created explicitly to provide a security context for automated system and application services running on the system. Service accounts should be configured with a non-trivial, complex password that is used in an automated service process and ... (full steps: CIS section 4.8)

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

To establish the recommended configuration, change all interactive user profile password expiration intervals to *SYSVAL. Note: Service profiles may be set to a non-expiring password (*NOMAX) commensurate with your organization policy. CHGUSRPRF USRPRF(<xxxxxx>) PWDEXPITV(*SYSVAL)

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: ibm-ipassword-policy
Referans: CIS IBM i V7R5M0 Benchmark v2.1.0 - 4.8 User Profile With Non-Expiring Passwords